Assistant Vice President (AVP) of IT Risk Management (ORM)

Together we fight for everyone’s opportunity for a better financial future.

We will do this together — with customers, partners and colleagues. We will fight for others, not against: We will stand up for and champion everyone’s access to opportunities. The status quo is not good enough … we believe every individual and every community deserves access to financial opportunities. We are determined to support both individuals and communities in reaching a better financial future.  We know that reaching this future depends on our actions today.

Like our Purpose Statement, Voya believes in being bold and committed to action.  We are committed to a work environment where the differences that we are born with — and those we acquire throughout our lives — are understood, valued and intentionally pursued. We believe that our employees own our culture and have a responsibility to foster an environment where we all feel comfortable bringing our whole selves to work. Purposefully bringing our differences together to positively influence our culture, serve our clients and enrich our communities is essential to our vision.

Are you ready to join a company with a strong purpose and a winning culture? Start your Voyage – Apply Now

Get to Know the Opportunity

The Assistant Vice President (AVP) of IT Risk Management reports to the Vice President & Head of Operational Risk Management (ORM) for Voya Financial (Voya), and is responsible for supporting Voya’s strategy, framework and execution activities for managing IT risk; ensuring a proper process is in place to mitigate and prioritize risk remediation actions. IT risk is defined as the risk of loss resulting from inadequate or failed IT systems, processes, people, or external events. IT risk management is the governance and oversight function responsible for independently managing IT risk in partnership with senior business management. This senior role will assist the organization in the identification, classification, measurement and monitoring of IT and related business risks. Work closely with others in IT Risk Management, Operational Risk Management, Compliance, Audit functions and business units to provide business management with a consistent and accurate view of the sources, scale, and scope of identified risks.

The Contributions You'll Make

The individual’s primary focus is on properly advising the business on IT risk matters and executing the implementation and communication of IT risk-related policies, practices and framework to support business leadership in monitoring, analyzing and remediating the organization’s key risk exposures on both a tactical and strategic basis.

• Individual will be a member of the IT Risk Management management team; participate in the ongoing maintenance of a robust IT risk management strategy and framework; and help lead strategic firm-wide IT Risk Management initiatives.
• Individual will manage and coach a team of dedicated IT risk analysts focusing on risk identification, assessment, measuring and monitoring activities such as risk advisory, risk event analysis, risk assessments, design and implementation of forward leaning metrics like KPIs, KRIs and other related risk measures.
• Individual will be involved in risk matters requiring a strong understanding of the details to keep business stakeholders focused on key risks and ongoing strategic remediation efforts.
• Individual will be expected to have a strong understanding of key risks, prepare relevant materials and present to senior levels within the organization.
• Support key business projects and advise on related risk-reward decisions. Probes beyond symptoms to determine the underlying causes of problems.
• Responsible for planning and prioritization of risk monitoring activities according to business needs and strategic goals.
• Identify and perform proactive risk assessments of key business areas. Evaluate the adequacy and effectiveness of internal controls relating to IT risks. Provide recommendations and acquire management actions to reduce identified risks.
• Monitor and track progress of action items and validate closure of issues.
• Develop and deliver structured presentations for Risk Committees, this also include supporting Voya’s risk governance structure and activities.
• Participate in business disruption response as needed and provide subject matter expertise for relevant functions/area responsible for incident reporting and tracking.
• Takes a proactive approach in identifying opportunities to minimize risk.
• Support the execution of the enterprise risk management program.
• Support the development of IT risk related training for the organization as needed.

Preferred Knowledge and Expe