Overview

This is a remote role that may be hired in several markets across the United States.

This position is responsible for providing independent risk oversight of Technology risk. Successful independent Technology risk oversight is driven by a combination of industry, technology, cybersecurity, and/or Large Bank experience in order to apply Enterprise Risk Management ("ERM") and Operational Risk Management ("ORM") frameworks. Performs effective risk identification, measurement, and assessment activities in the areas of technology Infrastructure and Networking, Cloud and Virtualization, Mainframe, related Architecture, and other domains in technology. Oversees the effective implementation of risk management and assessment activities within the Technology setting, including policies and standards for Risk Identification and Assessment, Risk Control Self Assessments ("RCSAs"), and Key Controls & Mitigation. Collaborates with regulators on continuous monitoring and exam management for business units and enterprise-wide business support groups in order to manage risk cross-functional issues. Establishes and maintains relationships with key internal stakeholders across the Three Lines of Defense, providing support for management and technology governance. Acts as the subject matter expert for technology risk identification, measurement, and assessment activities. Identifies opportunities for program improvement, consistent application of risk principles, and regulatory compliance monitoring. Develops and executes on resolutions of complex problems that require the frequent use of creativity. Uses judgment and risk-based approach within broadly defined policies and practices.

• Risk Management - Oversees first-line execution of risk management policies, standards, and procedures. Collaborates with other key stakeholders across the organization to ensure appropriateness of and compliance with ERM and ORM program requirements. Maintains productive relationships with key stakeholders to ensure effective engagement. Communicates risk vision and regulatory requirements to stakeholders. Develops relationships and remains active within professional networks to stay abreast of current and emerging issues and relevant trends in technology.
• Subject matter expertise - Provides credible and effective risk-focused review and challenge to technology related business activities, initiatives and risk assessments based on technology domain knowledge and gained expertise in technology areas. Focus areas are Infrastructure and Networking, Cloud and Virtualization, Mainframe, End-user Computing, and related Architecture.
• Committees and Projects - Provides support for other ERM & ORM programs and initiatives. Participates as a risk advisor on project teams or governance structures to provide guidance on risk best practices, processes, and regulatory requirements.
• Audit and Regulatory Support - Assists in managing preparation activities for ORM Internal Audit and regulatory exams. Partners with managers to ensure components are received in a timely manner for posting prior to exam start.

• 3 years of experience in Technology Risk Management in a regulated industry.
• Hands-on direct exposure to technology systems infrastructure (e.g., networking, hosting, cloud, virtualization, mainframe).
• Knowledge of regulatory guidance and industry frameworks pertaining to technology related aspects (i.e., FFIEC IT Handbook, NIST, ISO, ITIL, CCM etc.),

• Relevant industry certifications (e.g., CISSP, CISA, CCSP, CCNA)
• Experience working in Risk Lines in a Large Financial Institution ($100B+ in assets) setting
• Previous management role in technology functions aligned with IT Infrastructure