Technology Risk Metrics Reporting Manager

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

 

The role

The Technology Risk Metrics and Reporting Manager is responsible for working with technology partners to understand, measure, and monitor progress toward achieving risk mitigation. This person will work very closely with technology process owners to document and gather metric data related to technology risk (KRIs) and performance (KPIs) and prepare information for executive-level audiences (committee materials, briefings, summary reports) related to technology risks. This person will also be responsible for evaluating and implementing capabilities for first line-of-defense (1LOD) automated control monitoring within technology processes and interfacing with second line-of-defense (2LOD) partners as they conduct automated monitoring.   

 

Additionally, this role will promote risk awareness and influence and train process owners to improve the measurability and reportability of technology controls in order to promote efficiency in measuring the control environment. The role will also interface with other risk professionals across all three lines-of-defense in order to most efficiently assess the control environment. 

What you’ll do:

• Management and oversight of key risk and performance indicators for technology objectives across the enterprise

• Partner with engineers and infrastructure SMEs, auditors, and reviewers to establish the most effective means of collecting metric data

• Work with Enterprise Risk Management to document rationale and methodologies for calculating key metrics

• Work with 2LOD and audit teams to understand and coordinate automated monitoring capabilities across three lines-of-defense

• Prepare committee materials, briefings, summary reports, and other documentation for executive-level audiences

• Prepare and deliver training materials related to technology risk processes and better practices across technology

• Exceed timeliness goals and meet deadlines for publication of key metrics

• Drive accountability with process owners to ensure appropriate measurement and monitoring of their process areas. 

• Develop and update procedures and training to ensure data gathering and monitoring standards are followed.

• Adhere to risk and compliance policies. 

• Maintain a comprehensive understanding of existing and emerging regulatory requirements, operational processes, inherent risks, and internal policies & practices to provide advice to stakeholders.

• Monitor and report on the effectiveness of risk mitigation strategies

• Communicate technology risks to senior management and stakeholders

 

What you’ll need:

• Minimum 12+ years of experience in risk management (technology a plus) in a financial services and/or banking operating environment; specifically managing first or second line of defense risk and controls activity

• Experience with interacting and solutioning with engineers and infrastructure teams to document and measure control effectiveness

• External audit, internal audit, or 2LOD technology risk experience

• Experience collaborating across multiple teams and enterprise-wide

• Strong ability to create a culture of ownership, accountability, and collaboration

• Partnership mindset to ensure we have positive and productive working relationships with auditors and examiners 

• Results oriented and attention to detail

• Strong verbal and written communication skills 

• Strong understanding of technology risk management frameworks and best practices

• Strong analytical and problem-solving skills

• Excellent communication and presentation skills

• Ability to balance multiple critical priori