AVP, Operational Risk – Information Technology Oversight

Operational Risk Management is part of Synchrony’s 2nd Line of Defense (2LOD). This role performs independent oversight of information-technology operational risks, including assessment and monitoring of IT programs, emerging-technologies adoption, and third-party risks specific to the IT function. Reports to the VP, Information Technology Oversight.

Responsibilities

• Engage the Information Technology organization in reviewing and assessing operational risks in the selection, deployment, and use of new technologies introduced into the Synchrony Technology Stack, including re-use of existing technology leveraged in new ways.
• Monitor risks accepted by the business and provide an independent assessment of risk-taking activities.
• Perform formal assessments of technology risks using common Risk Management processes: Targeted Reviews, Concurrent Reviews, and Continuous Monitoring.
• Independently investigate potential risks taken by Information Technology teams and escalate through ORM processes.
• Monitor Cloud Computing and Public Cloud Service activities related to AWS and Azure; develop control objectives based on regulatory guidance and assess risks in Synchrony’s deployment of these technologies.
• Contribute to and validate delivery on Alpha, Beta, and General Availability requirements for Cloud and new technology certifications across IT teams (Applications and Infrastructure). Confirm evidence provided for each certification and ongoing sustainability of requirements for each phase.
• Represent 2LOD at forums including Cloud Design Authority (CDA), Architecture Review Board (ARB), Enterprise Architecture Forum, and Program Increments (PI) sessions for sprint teams (Cloud, Security, etc.).
• Review risks within the IT third-party supplier base, considering unique risks based on vendor relationships and services (e.g., purchased software, software as a service, service providers, staff augmentation).
• Manage risks and issues within Synchrony’s enterprise governance application (eGRC).
• Support 2nd Line of Defense processes such as the Enterprise Risk Assessment (ERA) and Risk and Control Self-Assessment (RCSA).
• Perform other duties and/or special projects as assigned.

Requirements

• Bachelor’s degree with 5+ years of information technology and/or data analytics experience in financial services or a banking institution.
• Strong understanding of operational risks in Technology, including software obsolescence, application design for resiliency (performance and availability) to meet business demands.

Skills

• Familiarity with information security and risk management concepts.
• Proven analytical skills with strong attention to detail and quality control of work product.
• Experience in financial services or banking industry with understanding of financial services regulatory environment.
• Experience in IT operations and/or application support.
• Experience with data sourcing and reporting processes; ability to design and implement new analytical capabilities.
• Experience with Internal Audits and/or Regulatory Exams; preparing materials to respond to external inquiries, providing evidence and rationales.
• Proven experience working in ambiguous environments; ability to explain complex concepts and support points of view.
• Strong presentation and communication skills (written and oral) with proven experience interacting with all levels of the organization.
• Experience writing formal findings to Senior levels of Management.
• Proficiency in PC tools (Microsoft Suite: Word, Excel, PowerPoint).
• Excellent interpersonal skills; ability to foster relationships and create informal networks, both internal and external.
• Curiosity and ability to learn new concepts.

Pay

The salary range for this position is $90,000 – $155,000 USD annually and is eligible for an annual bonus based on individual and company performance. Actual compensation offered within the posted salary range will be based on work experience, skill level, or knowledge. Salaries are adjusted according to market in CA, NY Metro, and Seattle.

Schedule

Flexible work arrangement allowing you to work from home near one of Synchrony’s Hubs or come into an office. You will be required to commute to your nearest Hub (virtual or physical) for in-person engagement activities such as regular business or team meetings, training, and culture events.

Eligibility Requirements

• Must be 18 years or older.
• Must have a high school diploma or equivalent.
• Must be willing to take a drug test, submit to a background investigation, and submit fingerprints as part of the onboarding process.
• Must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
• Legal authorization to work in the U.S. is required; we will not sponsor individuals for employment visas for this job opening.