Director, Technology Risk Management

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation fintech company using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The Role:

As Director of Technology Risk Management (1LOD), you will be responsible for leading and coordinating first line risk management programs functions at SoFi and related entities (“SoFi”). You will partner with technology and information security teams to assess the risk and control environment, drive the establishment and monitoring of effective controls, drive reporting and monitoring of key metrics, identify key areas for improvement, and help oversee technology processes. This is a critical leadership role to support SoFi’s growth, through active risk management of SoFi and other entities.

What You’ll Do:

• Establish and provide ongoing ownership for Technology Risk initiatives and programs at SoFi
• Review current and future use of technology to support SoFi strategies and objectives to ensure risks are adequately identified, measured and mitigated.
• Define, enhance and execute the roadmap for enterprise programs (including but not limited RCSA, Issue Management, and Audit Management) for SoFi 
• Lead Technology assessments (internal and external), recommend mitigation strategies, and work with internal partners to assign ownership, advise on solutions, and drive/influence completion.
• Oversee plans to address any internally or externally-identified improvement requirements
• Define, monitor and report on KRI/KPI metrics  for Technology Risk related programs
• Provide updates to Senior Leadership and Committees on program effectiveness as needed
• Provide subject matter expertise in Technology Risk and serve as the main point of contact within the organization for all Technology Risk Management concepts

What you’ll need:

• 10+ years of professional experience
• 5+ years of relevant experience in Technology Risk Management and Enterprise Risk Management, including experience with a Financial Technology - Framework (FFIEC, COBIT, PCI, etc.)
• Bachelors’ Degrees in Computer Science, Systems Engineering, Information Technology or Security Assurance, or equivalent technical experience
• Experience working in, or consulting for, Fed-regulated Bank Holding Companies
• Strong risk assessment and process evaluation experience
• First hand experience working with with various technology and governance frameworks
• Knowledge of regulatory requirements for financial services; deep understanding of how financial services organizations adhere to internal controls and external regulations
• Experience developing and enforcing data governance policies
• Experience executing control and compliance programs
• Experience working in an Agile development environment
• Flexible and adaptable; able to work through ambiguous situations to create clear systems and processes in an evolving regulatory environment
• A proven track record of delivering effective technology risk systems and processes
• Exceptional partnership capabilities and able to thrive in a matrixed organization where success depends on a high degree of cross-functional collaboration; ability to build strong relationships within the team, with executives, and with cross-functional partners across the company
• Excellent communication skills (verbal, written, and visual); ability to communicate complex technology and security concepts to both technical and non-technical partners

Nice to have:

• Industry certification(s) (e.g. CRISC, CISA, CISSP, CISM)

Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.    To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!

SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without