Sr. Director, Technology Risk Management

Sr. Director, Technology Risk Management

Country: United States of America

USA Job Family Description:  Monitors activities to minimize the company's exposure to technology risks. Activities may include independent 2nd line of defense independent assurance over technical risk analysis, risk identification and remediation. The incumbent shall ensure that the oversight over technology risk management activities is adequate to minimize compliance and regulatory risk by resolving issues and ensuring adherence to industry good practice frameworks, company and legal standards. The Senior Director is responsible for ensuring that all of the company's activities adhere to the necessary rules and regulations, and that the company complies with legal/regulatory statutes and jurisdictions.

USA Job Function Description:

The Sr. Director, Technology Risk at Santander US and Santander Bank NA is responsible for all independent risk management and assurance activities over the assigned business area’s technology footprint as part of the second line of defense Technology and Information Risk organization.

The incumbent develops and maintains an effective Technology Risk Management program that enables the assigned business area to comprehensively identify, assess, mitigate, manage, monitor and report technology risk, including performing technical risk reviews of identified domains.

This role is established in the second line of defense and requires collaboration across CISO, Data Office, IT, Operational Risk, Internal Audit and other relevant functional stakeholders within the organization in the management of existing and emerging technology risks. An excellent understanding of the evolving regulatory landscape in the US and EU are vital for success in this role.

The day-to-day focus may vary depending on the requirements of the overall second line of defense program priorities directed by the Head of Technology Risk and may include: planned or ad-hoc technical risk reviews, review of Technology or Business initiatives, Review and challenge activities, Risk reporting, development of technical risk framework and methodologies.

The team to support the oversight of technology risks will comprise of individuals positioned as a center of excellence aligned against the core coverage areas noted above. Direct reports include leads assigned to core coverage areas.

Key Responsibilities:

• Establish themselves as the second line of defense subject matter expert for key stakeholders in the management of technology risks across all operating entities
• Prepare information to enable governance committees / working groups in the management oversight of technology risks
• Participate in relevant governance committees and working groups as a delegate of the Head of Technology, including the Operational Risk Committee, Technology Executive Working Group, Information Security & Data Management Committee, Architectural Review Board, AI Evaluation Forum
• Initiate timely escalations to the Head of Technology Risk and to the leadership team
• Identify and assess technology risks and counsel business units managers, IT GRC, CDO and/or CISO stakeholders on risk management issues to ensure awareness and accountability for technology risks
• Oversee ongoing oversight of the firm’s technology and information risk footprint through ongoing monitoring, formal review and challenge activities, targeted risk reviews, technology policy and standard assurance, and other activities e.g., transformation review and challenge.
• Develop and implement a technical risk management governance, framework to enable the strategic business direction of the organization
• Ensure the updating of existing policies and framework or develop new ones that steer the safe and sound adoption of technologies across the organization
• Participate in the independent and ongoing risk oversight of key technology components of the firm’s digital transformation initiatives. Additionally, participate in the oversight of key emerging technology risks
• Implement and sustain independent risk oversight coverage of the operating platform and vendor software development activities.
• Work across the lines of defense to recommend strategies that effectively treat risks within the risk appetite
• Monitor external trends and evaluate potential impacts to business strategy; provide documented analytical insights of the risk horizon, while ensuring a sound operational and compliance control environment through establishment of a system of effective and sustainable internal controls
• Participate in evaluation of new products / Business changes / projects and assess related information risks and impact to the technology risk profile
• Participate in the evaluation and management of technology risks