Sr. Manager ORM Governance and Practices

At Early Warning, we’ve powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze℠, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

Overall Purpose

This position will be responsible for leading a high performing team and providing risk management and technical expertise in assessing the overall effectiveness of the company’s risk and control environment and ensuring compliance of Operational Risk Management (ORM) Program. In addition, this position will help to attest to the quality of the control environment across the first line of defense by performing validation of controls identified through the Risk and Control Self Assessments, Process Level Assessments and Product and Compliance Risk Assessments. 

Essential Functions  

• Lead a high performance team by providing exceptional leadership ongoing training, coaching, and performance management.

• Perform validation of identified controls to ensure they have adequate governance, evidence of execution, and appropriate monitoring and escalation.  Depending on focus area, this position will be responsible for performing validation of controls on one or more of the following: security, operational or compliance.

• Independently identify risk through undefined processes or ways that are not pre-determined.

• Document validation results, prepare work papers to evidence validation methods, and draft final reports for customers summarizing validation results. 

• Ensure issues are properly reported to business areas and remediated appropriately.

• Perform and support detailed data analysis to include trending and issue identification.

• Identify emerging risks, process improvements, or areas for increased training through the analysis of results.

• Responsible for building and maintaining relationships with business partners while adhering to the highest ethical standards required for independent validation.

• Manage work across organizational lines to achieve results and manage competing priorities.

• Support procedure reviews and document updates.

• Develop communications (written and presented) to support findings.

• Assist with compiling metrics

• May partner with the first line of defense in preparing risk and control self-assessments.

• Perform product risk assessments or activities supporting the operational risk function.

• Provide effective challenge to the business where appropriate.

• Support the company’s commitment to risk management and protecting the integrity and confidentiality of systems and data.

Minimum Qualifications

• Education and/or experience typically obtained through completion of a Bachelor’s degree in Computer Science, Business Administration, Finance, Accounting or related field.

• 10 or more years of related experience in audit, operational risk or other risk management roles or prior testing and quality assurance experience.

• 4 or more years of direct people responsibility or equivalent project leadership experience

• For Information Security Related Control Validation Roles:

  ·        Strong validation or audit experience in information security, information security compliance, IT audit, information technology or related.

  ·        Expertise in ISO 27002, PCI DSS 3.2 or current, NIST 800-53a, SIG, FFIEC handbooks, SOC2 Type II, GLBA, FCRA.

  ·        Technical experience with security-related technologies including firewalls, IDS, vulnerability management, anti-virus, data loss prevention, two factor authentication, and VPN.

  ·        Certification in one or more of the following: CISA, CISM, CISSP, CCSP, CRISC, GSNA, CGIH, or equivalent

• Excellent communication skills and ability to influence and guide others.

• Strong relationship building ski