AVP, Operational Risk – Information Technology Oversight

Operational Risk Management is part of Synchrony’s 2nd Line of Defense (2LOD). This role performs independent operational-risk oversight of information technology, assessing and monitoring risks tied to IT programs, emerging technologies, and third-party IT services. The position reports to the VP, Information Technology Oversight.

Responsibilities

• Engage the Information Technology organization in reviewing and assessing operational risks in the selection, deployment, and use of new technologies introduced into the Synchrony Technology Stack, including reuse of existing technology in new ways.
• Monitor risks accepted by the business and provide an independent assessment of risk-taking activities.
• Perform formal assessments of technology risks using common Risk-Management processes: Targeted Reviews, Concurrent Reviews, and Continuous Monitoring.
• Independently investigate potential risks taken by Information Technology teams and escalate through ORM processes.
• Monitor Cloud Computing and Public Cloud Service activities (AWS, Azure) to develop control objectives based on regulatory guidance and assess risks in Synchrony’s deployment of these technologies.
• Contribute to and validate delivery on Alpha, Beta, and General Availability requirements for Cloud and new-technology certifications across IT teams (Applications and Infrastructure). Confirm evidence provided for each certification and ongoing sustainability of requirements for each phase.
• Represent 2LOD at forums including Cloud Design Authority (CDA), Architecture Review Board (ARB), Enterprise Architecture Forum, and Program Increments (PI) sessions for sprint teams (Cloud, Security, etc.).
• Review risks within the IT third-party supplier base, considering unique risks based on vendor relationships and services (e.g., purchased software, software as a service, service providers, staff augmentation).
• Manage risks and issues within Synchrony’s enterprise governance application (eGRC).
• Perform other duties and/or special projects as assigned.
• Support 2nd Line of Defense processes such as the Enterprise Risk Assessment (ERA) and Risk and Control Self-Assessment (RCSA).

Requirements

• Bachelor’s degree with 5+ years of information technology and/or data analytics experience in financial services or a banking institution.
• Strong understanding of operational risks in Technology, including software obsolescence, application design to meet resiliency (performance and availability) requirements, and achieving business demands.

Skills

• Familiarity with information security and risk management concepts.
• Proven analytical skills with strong attention to detail and quality control of work product.
• Experience in financial services or banking industry with understanding of financial services regulatory environment.
• Experience in IT operations and/or application support.
• Experience with data sourcing and reporting processes, with ability to design and implement new analytical capabilities.
• Experience with Internal Audits and/or Regulatory Exams, preparing materials to respond to external inquiries, providing evidence, and rationales for provided materials.
• Proven experience working in an ambiguous environment with ability to explain complex concepts and support points of view.
• Strong presentation and communication skills (written and oral) with proven experience interacting with all levels of the organization.
• Experience writing formal findings to Senior levels of Management.
• Proficiency in PC tools (Microsoft Suite, including Word, Excel, and PowerPoint).
• Excellent interpersonal skills—ability to foster relationships and create informal networks, both internal and external.
• Curiosity with the ability to learn new concepts.

Pay

The salary range for this position is $90,000 – $155,000 USD annually and is eligible for an annual bonus based on individual and company performance. Actual compensation offered within the posted salary range will be based on work experience, skill level, or knowledge. Salaries are adjusted according to market in CA, NY Metro, and Seattle.

Schedule

Synchrony offers flexibility with the option to work from home near one of our Hubs or come into one of our offices. You will be required to commute to your nearest Hub (either virtual or physical) for in-person engagement activities such as regular business or team meetings, training, and culture events.