Responsibilities

Director, Enterprise Risk

Location: Orlando/Lake Mary, Florida; or Atlanta, Georgia, Mississauga, Canada

About Finastra: Finastra is a rapidly growing, private equity-owned Fintech company that has evolved through a combination of organic growth and acquisitions. We are committed to fostering an inclusive and diverse workplace where everyone feels valued and empowered to contribute.

Role Overview: Finastra is seeking a Director of Enterprise Risk who will be responsible for all aspects of Risk Management, Regulatory Compliance, and Internal Audit for our Business Units (BU). This role reports directly to the VP of Enterprise Risk Management and acts as a strategic partner to Finastra businesses, providing expert advice on risk and compliance matters. The Director will collaborate with stakeholders across Finastra, including IT, Information Security, Compliance, and Audit, as well as external regulatory bodies such as the Fed, FDIC, and OCC.

• Develop and implement a strategic, long-term risk management strategy and plan for the Business.
• Identify, evaluate, and report on BU risks, practices, and progress to senior leadership and governance committees.
• Provide subject-matter expertise on risk management standards and best practices to meet regulatory and compliance obligations.
• Design and implement approaches, standards, and processes to ensure compliance with applicable laws, regulations, and contractual requirements.
• Work with senior leaders to assess and communicate acceptable levels of risk.
• Champion risk and compliance, fostering a risk-aware culture and proactive risk management practices.
• Collaborate with Internal Audit, Compliance, Cybersecurity, IT, and BU colleagues, as well as external auditors, clients, and regulators.
• Monitor the industry and external environment for emerging risks and advise stakeholders on appropriate actions.
• Conduct risk assessments for compliance with policies, standards, key controls, and regulatory requirements.
• Validate exceptions, quantify risks, investigate root causes, and work with owners to establish action plans.
• Provide ongoing monitoring, tracking, and reporting of issues and remediation activities to senior leadership and governance committees.

• At least 10 years of experience in Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and/or IT Governance.
• Proven experience in a financial institution, fintech, risk advisory firm, or financial services regulator.
• Knowledge of laws, regulations, guidelines, and frameworks within the financial services industry (e.g., FFIEC, COSO, NIST, ISO 27001/27002, GLBA, SOX).
• Experience managing cybersecurity and IT risks, with familiarity with the current threat landscape.
• Comfortable working in a matrix organizational structure.
• Excellent organizational, presentation, project management, and communication skills.
• Ability to engage and develop relationships with external stakeholders, including regulators, auditors, and customers.
• Self-driven with a passion for developing and driving risk practices that produce best-in-class results.
• Innovative thinker with the ability to look beyond past practices for the best path forward.
• Ability to build a deep understanding of Finastra's business imperatives and develop strong relationships across all functions.
• Bachelor's degree in business, computer science, finance, or a related field (graduate degree preferred).
• Professional certifications such as CISSP, CISM, CISA, CIA, CRISC are preferred.