Sr. Technology Risk Associate

Sr. Technology Risk Associate

Country: United States of America

Your Journey Starts Here:

Santander is a global leader and innovator in the financial services industry. We believe that our employees are our greatest asset. Our focus is on fostering an enriching journey that empowers you to explore diverse career opportunities while nurturing your personal growth. We are committed to creating an environment where continuous learning and development are prioritized, enabling you to thrive both professionally and personally. Here, you will find ample opportunities to connect and collaborate with talented colleagues from around the world, sharing insights and driving innovation together. Join us at Santander, where you are supported by a culture of engagement and a commitment to your success.

An exciting journey awaits, if you are interested in exploring the possibilities We Want to Talk to You!

Position Summary:

The Sr. Technology Risk Associate is responsible for ongoing oversight, assessment, management and reporting of technology and cybersecurity risks across Banco Santander International (BSI). This role is established in the second line of defense and requires collaboration across IT, CISO, Data Office, Operational Risk, Internal Audit and other relevant functional stakeholders within the organization in the management of Technology risks. An excellent understanding of the evolving regulatory landscape in the US and EU are vital for success in this role.

The day-to-day focus may vary depending on the requirements of the overall second line of defense program priorities directed by the Chief Operational Risk Officer and may include: planned or ad-hoc technical risk reviews, technical review of IT and security architectures, review and challenge activities of IT or Business initiatives, risk reporting, development as well as review and challenge of technical risk framework and methodologies.

Sr. Technology Risk Associate reports to the Chief Operational Risk Officer.            

Position Duties / Responsibilities:

Program Development
• Direct the development and execution of projects for Banco Santander International (BSI) covering Business Continuity and Technology Risk Management (IRM) that comply with applicable regulations and identify milestones and compliance dates.
• Report and monitor conformance and delivery against project plans, making adjustments and recommendations, where justified.
• Drive culture of Technology Risk and Business Continuity Risk awareness and deliver required training.
• Direct risk measurement and monitoring processes and communicate results, recommendations and escalations to the BSI Chief Operational Risk Officer (CORO).
• Assess and communicate Technology and Business Continuity risk associated with all material activities/projects of the company.
• Act as liaison with group, holding company and entity counterparts for identification of best practices, standards, policy and program updates for TRM and BCM.
• Communicate to BSI CORO significant developments in the maturity of the Business Continuity Management and Technology Risk Management Program and Framework.
• Perform independent review and challenge with first line of defense (1LoD) and address risk and control self-assessment (RCSA) outputs for technology infrastructure.
• Support the development and implementation of the Technology Risk and Business Continuity Risk program strategy, policies and models.
• Prepare, summarize and report updates of technology risk management (TRM) risk drivers and business continuity management activities (BCM) to CORO and applicable stakeholders.
• Support implementation at the operating units by serving as Business Continuity risk management and TRM subject matter expert.
• Interact with other Risk Managers and department heads.

Compliance
• Coordinate with the first line of defense to implement the new and existing regulatory standards regarding governance, the Technology and Business Continuity Risk Management Framework and related policies and procedures.
• Lead in the execution and review of concluded risk assessments, attestations and perform IT compliance control testing review and challenge.
• Create and report auditable measurements, remediation of findings and report recommended course of action to the BSI CORO, on a routine basis, for all matters related to TRM and BCM.
• Maintain regulatory compliance and credibility with regulators at the Federal Reserve Board, with respect to Business Continuity risk management and Technology risk issues.
• Facilitate effective regulatory examinations and audit reviews when required.
• Oversee the review of reports and updates from GDPR, SOX, FFEIC, OCC, GLBA and Group for Operational Ris