AVP, Operational Risk – Information Technology Oversight

Operational Risk Management is part of Synchrony’s 2nd Line of Defense (2LOD). This role performs independent oversight of information-technology operational risks, including assessment and monitoring of IT programs, emerging-technologies adoption, and third-party IT risks. Reports to the VP, Information Technology Oversight.

Responsibilities

• Engage the Information Technology organization in reviewing and assessing operational risks in the selection, deployment, and use of new technologies, including re-use of existing technology in new ways.
• Monitor risks accepted by the business and provide an independent assessment of risk-taking activities.
• Perform formal assessments of technology risks using common Risk-Management processes (Targeted Reviews, Concurrent Reviews, Continuous Monitoring).
• Independently investigate potential risks taken by IT teams and escalate through ORM processes.
• Monitor Cloud Computing and Public Cloud Service activities (AWS, Azure) to develop control objectives based on regulatory guidance and assess risks in Synchrony’s deployments.
• Contribute to and validate delivery on Alpha, Beta, and General Availability requirements for Cloud and new-technology certifications across IT teams (Applications and Infrastructure). Confirm evidence and sustainability of requirements for each phase.
• Represent 2LOD at forums such as Cloud Design Authority (CDA), Architecture Review Board (ARB), Enterprise Architecture Forum, and Program Increments (PI) sessions for sprint teams (Cloud, Security, etc.).
• Review risks within the IT third-party supplier base, considering unique risks based on vendor relationships and services (e.g., purchased software, software as a service, service providers, staff augmentation).
• Manage risks and issues within Synchrony’s enterprise governance application (eGRC).
• Support 2nd Line of Defense processes such as the Enterprise Risk Assessment (ERA) and Risk and Control Self-Assessment (RCSA).
• Perform other duties and/or special projects as assigned.

Requirements

• Bachelor’s degree with 5+ years of information technology and/or data analytics experience in financial services or a banking institution.
• Strong understanding of operational risks in Technology, including software obsolescence, application design for resiliency (performance and availability) to meet business demands.

Skills

• Familiarity with information security and risk management concepts.
• Proven analytical skills with strong attention to detail and quality control of work product.
• Experience in financial services or banking industry with understanding of the regulatory environment.
• Experience in IT operations and/or application support.
• Experience with data sourcing and reporting processes; ability to design and implement new analytical capabilities.
• Experience with Internal Audits and/or Regulatory Exams; preparing materials to respond to external inquiries with evidence and rationales.
• Proven experience working in ambiguous environments; ability to explain complex concepts and support points of view.
• Strong presentation and communication skills (written and oral) with experience interacting at all organizational levels.
• Experience writing formal findings for Senior Management.
• Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).
• Excellent interpersonal skills; ability to foster relationships and create informal networks, both internal and external.
• Curiosity and ability to learn new concepts.

Pay

The salary range for this position is $90,000 – $155,000 USD annually, eligible for an annual bonus based on individual and company performance. Actual compensation within this range will be based on work experience, skill level, or knowledge. Salaries are adjusted according to market in CA, NY Metro, and Seattle.

Schedule

Flexible work arrangement allowing remote work near a Synchrony Hub or in-office attendance. Regular in-person engagement activities (e.g., business or team meetings, training, culture events) require commuting to the nearest Hub. Field Sales and some Commercial roles may have varied location requirements.

Eligibility Requirements

• Must be 18 years or older.
• Must have a high school diploma or equivalent.
• Must be willing to take a drug test, submit to a background investigation, and provide fingerprints as part of onboarding.
• Must satisfy requirements of Section 19 of the Federal Deposit Insurance Act.
• New hires (Level 4-7) must have 9 months of continuous service before posting for other roles; after meeting this requirement, a minimum of 6 months in position is required before posting for non-exempt roles.
• Employees (Level 8 or greater) must have at least 18 months in position before posting for other roles.
• All internal employees must meet performance expectations and have manager approval to post (or manager and HR approval if performance or time-in-position requirements are not met).
• Legal authorization to work in the U.S. is required; sponsorship for employment visas is not available for this role.