Director - IT FLCO Application Risk Lead

If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer.  

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

The Director, Front Line Controls Officer will play a critical leadership role in overseeing and strengthening the bank’s technology and application control environment. This individual will report to the Managing Director Front Line Control Officer and serve as the primary risk partner to the bank’s Business Solutions team to ensure that technology risks are proactively identified, assessed, and mitigated across the enterprise.

Key responsibilities include building and maintaining a comprehensive control inventory, enhancing the risk and control self-assessment (RCSA) program, and ensuring alignment with internal policies, regulatory requirements, and industry best practices. The role will also provide risk partnership for key technology processes, including system availability, Batch Operations (job scheduling and secure file movement), monitoring and logging, release management, quality assurance, and Application Programming Interface (API) management. The ideal candidate will bring deep expertise in technology risk management and internal controls within the banking sector that enable the candidate to serve as the "voice of risk" with key Business Solutions initiatives and large-scale, high-visibility regulatory remediation programs.

The Director, Front Line Controls Officer will play a critical leadership role in overseeing and strengthening the bank’s technology and application control environment. This individual will report to the Managing Director Front Line Control Officer and serve as the primary risk partner to the bank’s Business Solutions team to ensure that technology risks are proactively identified, assessed, and mitigated across the enterprise.

 

Key responsibilities include building and maintaining a comprehensive control inventory, enhancing the risk and control self-assessment (RCSA) program, and ensuring alignment with internal policies, regulatory requirements, and industry best practices. The role will also provide risk partnership for key technology processes, including system availability, Batch Operations (job scheduling and secure file movement), monitoring and logging, release management, quality assurance, and Application Programming Interface (API) management. The ideal candidate will bring deep expertise in technology risk management and internal controls within the banking sector that enable the candidate to serve as the "voice of risk" with key Business Solutions initiatives and large-scale, high-visibility regulatory remediation programs.

Key Responsibilities:

• Leadership & Strategy: Oversight and management for a Technology Front Line Unit (FLU) aligning with the vision and objectives set by the Chief Controls Officer and the IT First Line Controls Officer. Leverage agile principals to operate transparently.
• Proactive Oversight: Drive the early identification of control issues, emerging risks, and process deficiencies. Lead root cause analysis and oversee the development and execution of robust, sustainable remediation plans to address control gaps and prevent recurrence.  Analyze risk data to assess likelihood, impact, and trends, and provide actionable insights to senior leadership.
• SDLC Engagement: Partner closely with peers within the IT First Line Control Office and Cloud Engineering to support risk-informed decision-making across the technology development lifecycle; serve as “voice of risk.”  Effectively integrate into key tollgates, including reviews of quality assurance testing plans and results, to provide strong risk support for assigned application portfolios.
• Application Risk Assessment:  Using a risk-based approach, perform application technology risk assessments, including dimensions of password compliance, user access provisioning and deprovisioning, segregation of duties, resiliency, computer operations, alignment to firm standards, vulnerability health, technical currency and availability.  Maintain <