Associate Director, BRAC Technology

08/27/2026

Address:

320 S Canal Street

Job Family Group:

Business Management

This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls  Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making.

Key Responsibilities:

• Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology.

• Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP).

• Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology.

• Performance of risk assessments in accordance with ORMF and ECP requirements.

• Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment

• Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes

• Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report.
   

Core Knowledge:

• At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management

• At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance.

• Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired

• Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools.

• Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.

• CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset

• Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools.

• Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience

• Knowledge of data governance frameworks and how these are implemented in complex and large organizations.

• Well versed in the technology issues affecting financial service organizations and cloud based application service providers

• Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor).

Contributes to the business’ accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counterparty, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank’s Risk Management Framework and approved Risk Appetite.

• Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.

• Acts as a subject matter expert on relevant regulations and policies.

• Acts as a strategic partner in which the program elements becomes an integrated component of the overall business/group strategies and helps drive business impact.

• Prepares and briefs senior leaders on regulatory matters across multiple businesses/groups.

• Supports multiple, similar business units with moderate complexity & business transa