Associate Director, Technology, Risk, Controls and Compliance Program Officer (RCCPO)

Application Deadline:

04/21/2024

Address:

1630 Chicago Road

Job Family Group:

Technology

This is a great opportunity to pursue career in Technology Risk Management, with great insights to the control environment, regulatory compliance and issue management and learn about new technologies, Our team operates in a matrix and consist of experts and welcomes out of the box thinking and challenge. The team is comprised of multiple Associate Director, Technology, Risk, Controls and Compliance Program Officers where each supports multiple technology groups in matters related to technology regulatory compliance and risk management. They also operate as Subject Matter Experts (SMEs) for one or more key technology, data, analytics and cyber security processes.    

Key Responsibilities include:

• Identify, understand, assess impact of applicable regulations and educated related technology groups. 
• Identify, assess and discuss potential risks and articulate potential solutions for mitigating potential and identified risks.
• Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology.
• Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP).
• Contribute to the sound, efficient operation of Tech & Ops by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology.
• Performance of risk assessments in accordance with ORMF and ECP requirements.
• Maintain the Tech & Ops Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment
• Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes
• Provide strong technology risk management analytics using data available related to key technology processes
• Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance manage

Qualifications:

• At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management
• At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance.
• Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired
•  Good data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools
• Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.
• CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset
• Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools.
• Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience
•  Knowledge of data governance frameworks and how these are implemented in complex and large organizations.
• Well versed in the technology issues affecting financial service organizations and cloud-based application service providers
• Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor)
• Typically 7-10 years of work experience in IT or business environment and/or BS/BA or MBA/MS in computer science, engineering, information systems, math or business.
• Understanding of Information Technology operating processes used for systems to ensure effective delivery including but not limited to IT Operations mandatory operating standards for monitoring, logging, and alerting.
• Knowledge of support and operations practice, concepts, and technology obtained through formal training and/or work experience.
• Technical and/or business functional knowledge of systems, tools, timing, and dependencies.
• Seasoned professional with a combination of education, experience and industry knowledge.
• Verbal & written communication skills - In-depth / Expert.
• Analytical and problem-solving skills - In-depth / Expert.