2nd Line Technology Risk & Governance Sr Manager

About the role

This position supports independent oversight, credible challenge, and risk appetite alignment for technology risk across the enterprise. It contributes to the execution and ongoing maintenance of the Second Line Technology Risk Framework.

Responsibilities

• Assess and challenge 1st line risk identification, ratings, and control effectiveness;
• Monitor adherence to risk appetite;
• Support escalation of material exposures through established governance;
• Collaborate with 1st line leaders and control owners for advisory support and credible challenge;
• Review and assess Archer issues to ensure they align with the Risk Appetite Statement, ERM Framework, and Technology Risk Framework;
• Evaluate specific areas of elevated or emerging technology risk, including change management, segregation of duties, user access, incident root cause analysis, remediation sufficiency, risk acceptance practices, or alignment to the Technology Risk Framework;
• Leverage and participate in existing assessments, audits, regulatory exams, issue management, and governance processes to identify residual risk themes and determine where second line credible challenge or targeted review activity would provide incremental value;
• Engage and provide credible challenge in the Risk and Control Self-Assessment governance cycle;
• Draft and support technology risk reporting for executive management and Board level materials, highlighting risk appetite breaches, emerging risks, thematic trends, and remediation status.

Requirements

• Education: Bachelor’s degree in technology, business or a related field;
• Experience: A minimum of seven (7) years of technology or technology risk experience, plus a minimum of three (3) years of experience in IT Risk & Governance and/or 2nd line/ERM oversight (or Internal Audit covering technology risk) providing independent challenge.

Qualifications

• IT/ITIL Certifications;
• IIBA Certification;
• Certified in Risk and Information Systems Control (CRISC);
• Certified Information Security Manager (CISM);
• Certified Information Systems Security Professional (CISSP).

Benefits

First Merchants offers a comprehensive benefits package including medical, dental and vision insurance, 401(k), health savings and flexible spending accounts, vacation/sick time, paid holidays, paid parental leave, tuition reimbursement, and additional benefits.

Pay

Base pay plus bonuses.

Schedule

Full-time.