Team Leader Information Security (3rd party Risk Management) (Finance)

Overview

We are seeking a full-time Team Leader for Third Party Risk Management in our Olathe, KS location. In this role, you will be responsible for being a subject matter export for assessing, mitigating, and treating risk related to third party vendors and partners. In addition, this role will provide guidance and direction to the Third Party Risk Management team related to executing Garmin's Third Party Risk Management program. The team leader is responsible for conducting risk assessments and monitoring for changes in risk as defined in Garmin's Information Security policies, standards, and procedures.

Essential Functions

All Teams:

• Lead a team of associates responsible for the execution of features, tools, and/or technologies associated with Garmin's agile scrum teams
• Effectively communicate with stakeholders at all levels within the organization to ensure mitigation of cyber security risks in the environment
• Monitor progress of the team in meeting deliverables and schedule compliance
• Research and recommend new technologies to meet the business needs
• Develop and continuously improve the way in which IT solutions are delivered
• Participate as needed/required in regular or special meetings of Cyber team to address strategies, integration, progress and/or issues needing promotion of problem solving
• Able to discern when to escalate issues to management
• Maintain, improve, and extend existing software
• Manage expenses, participate in budgeting process, and cultivate vendor relationships for any software or tools owned by the team in alignment with manager and/or director
• Own and manage tool roadmaps and vendor relationships; evaluate and recommend enhancements to optimize coverage and reduce risk exposure.
• Promote a culture of knowledge sharing, collaboration, and psychological safety where team members feel empowered to speak up and contribute.
• Provide significant contributions to defining team roadmap and priorities.
• Build/maintain high performing team(s) by recruiting, developing, and retaining outstanding talent
• Promote team member engagement and effectiveness by providing constructive feedback and promoting personal development, including writing and conducting annual performance appraisals
• Develop/manage team and individual performance and capacity metrics to identify successful operations or areas where improvement is needed, while also working to ensure that all organizational objectives are met
• Demonstrate ongoing personal development, professional growth, and continuous education
• Accept, develop and execute projects and other miscellaneous IT & Security duties as assigned
• Periodically review and update relevant policies, procedures, and standards to ensure alignment with compliance obligations and industry best practice
• Conduct third party risk assessments according to established procedures
• Set and publish program goals, objectives, and KPIs to monitor the health of the third party risk management program
• Collaborate with other members of the Information Security organization to define and publish acceptable risk mitigation and treatment options for third party risks
• Define and publish project scope, objectives, roadmaps, and progress reports following Cyber governance processes

Basic Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Management Information Systems, Business or related field AND a minimum of 5 years relevant experience OR equivalent combination of education and relevant years of experience
• Expereince with 3rd party risk management
• Demonstrated strong and effective verbal, written, and interpersonal communication skills
• Must be team-oriented, possess a positive attitude/work well with others, be a driven problem solver with proven success in solving difficult problems, possess excellent time management/follow-up skills, and consistently demonstrate quality/effectiveness in work documentation/organization
• Previous experience in management or leadership
• Solid understanding of enterprise IT services such as networking, storage, operating systems (Windows, Mac, and Linux), and databases

Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran's status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits