VP, Technology and Operations Risk and Control Management

Job Description:

Role Summary/Purpose:

This position is a leadership role responsible for leading first line of defense risk management for Tech & Ops teams, in adherence with Company’s Risk Management Framework and Corporate Strategy. 

The role has responsibility over a wide range of Tech&Ops activities that enables Synchrony business platforms and functional areas, and requires significant interaction with employees across various Synchrony functions and different levels of the organization. The individual will work closely with multiple teams within Tech&Ops function, various business functions, Independent Risk Management (2LOD), Audit (3LOD), and executive management.  The role requires a strong leader who can raise 1LOD risk management core capabilities and champions proactive risk management.

Our Way of Working

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.

Essential Responsibilities:

• Lead efforts on maturing Tech&Ops 1LOD Risk Assessment approach

• Lead and execute risk assessment to identify, evaluate and prioritize risk treatment 

• Monitor business strategy and industry trends to proactively identify and address emerging risks (e.g. risks from business growth and integration, risks from usage of GenerativeAI, etc.)  

• Work with management to establish risk mitigation strategies and provide guidance on control enhancement to ensure key risks are appropriately managed

• Identify critical areas to monitor and escalate issues and findings to appropriate stakeholders

• Collaborate with cross-functional teams (e.g. Tech&Ops leaders, product owners, Independent Operational Risk Management, etc.) to integrate risk management considerations into the design, development, and deployment of new or change in technology, products, services, and processes 

• Serve as subject matter expert in operational risk management matters to 1LOD teams

• Identify themes, trends, and enhancement opportunities to strengthen processes and controls and regularly review incident/problem resolution to ensure change/improvement to controls are executed

• Collaborates with process owners to assess controls as part of RCSA process and identify any gaps in process, risk, and control documentation

• Prepare and present updates to senior leadership and relevant stakeholders on the status of risk management activities 

• Provides feedback and collaborates with Tech&Ops teams on relevant governance documents to support first line activities and manage risk

• Ensure that teams adhere to relevant enterprise standards for risk management & governance requirements, including Synchrony’s enhanced business change governance process

• Lead ad hoc team projects/initiatives focusing on proactive risk management and to ensure risk management standards are met

• Partners with Tech&Ops executives to prepare for Regulatory exams and MRA closures

• Promotes risk-awareness and overall effectiveness of risk management programs

• Perform other duties and/or special projects as assigned

Qualifications/Requirements:

• Bachelor’s degree and minimum 10 years of either IT, IT Risk, Operational Risk, Audit or Compliance experience OR in lieu of a degree, High School Diploma/G.E.D. and minimum 15 years of either IT, IT Risk, Operational Risk, Audit or Compliance experience

• Demonstrated experience working with regulatory compliance such as FFIEC, SOX

• Demonstrated experience working with industry risk management frameworks such as CobIT, ITIL, NIST, ISACA

• Experience and demonstrated track record for providing consultancy and assurance services for Operational Risk strategy, policies and governance

• Willingness to travel up to 15% of the time

Desired Characteristics:

• Knowledge and/or work experience in AI/Gen AI risk management is a plus

• Strong Reg