Technology Segment Risk Manager Sr.

Summary

The Segment Risk Manager Sr is responsible for overseeing and administering operational and regulatory risk strategy programs for a major business segment and/or region with significant span of control.

Duties & Responsibilities

• Evaluate effectiveness of controls.
• Direct self-monitoring and testing activities to ensure they are performed in accordance with Corporate Risk Management requirements.
• Evaluate the adequacy and effectiveness of enterprise and regulatory controls and the resulting risk and control self-assessments.
• Deliver timely escalation of all issues requiring attention to senior management.
• Work with business segment management to ensure the overall risk function is effectively supporting strategic goals.
• Collaborate with audit/business segment/corporate risk to address issues with plausible action plans and target dates.
• Act as the central point for receipt and distribution of important risk information for the business segment and reciprocate the flow of information back to corporate risk management.
• Ensure business segment adheres to corporate and business unit policies and procedures.
• Must be aware of and keep abreast of credit risk associated with assigned business segment.
• Manages multiple Operational Risk Specialists.
• Performs other duties as assigned.

Basic Qualifications

• Bachelor’s degree
• Minimum of 7 years of experience in Audit, Compliance, Risk Management or Operational Risk.
• In lieu of a Bachelor’s degree, 4 additional years of segment-specific or risk related experience may be considered.

Preferred Qualifications

• At least 4 years of experience working at a Category 3 or higher financial institution, preferably within the First Line function.
• 2 years’ experience in Technology Risk related policy, procedures, or standards governance.
• 2 years’ experience with deployment pipelines, DevOps, Containers, and API’s.
• Advanced knowledge of risk management principles and regulatory compliance requirements.
• Excellent verbal and written communications and the ability to communicate and present requirements and issues clearly and concisely.
• Ability to deal with ambiguity and navigate through complex situations.
• Demonstrated ability to influence change, multi-task and work in a fast-paced environment.
• Knowledge of compliance and regulatory requirements (e.g.) GDPR, GLBA, SOX, SOC1, SOC2, PCI, PCI-DDS, FFIEC Guidance, NIST, MITRE, COBIT 2019, ITIL and Agile principles.
• Risk certification (CISSP, CISA or CRISC).
• Proficiency in MS Office suite.