Vice President, Technology Risk Management

Job Classification:

Technology - Risk & Governance

Reporting to the Global Chief Operations Officer of Global Technology and Operations, the Vice President, Technology Risk Management establishes risk strategy, governance models, and implements frameworks, technologies, tools, and best practices to improve operational risk management across Global Technology and Operations.

Key responsibilities include leading the design, development, implementation and ongoing run of the following: 

• Serve as a key stakeholder in re-defining the Operational Risk Operating Model, and development of the risk program requirements to ensure they are consistent with Prudential’s risk appetite and regulator expectations.

• Assist in the development of the Risk Appetite Framework and Key Risk Indicators

• Provide strategic and tactical effective challenge for all risks present within the Business Unit (BU). Concur with key risk decisions and escalate key emerging risks as appropriate.

• Guide risk-taking behavior. Provide counsel and advice to BU and senior BU leaders to mitigate risk quickly and drive to critical business results.

• Monitor risk exposure, concentrations, and limits. Ensure risk levels stay within risk appetite.

• Identify areas of opportunity to improve risk visibility within BU; develop and implement plan to transform opportunity into new processes and activities.

• Provide connectivity between the output of risk programs as appropriate and coordinate with stakeholders to resolve highly complex or challenging issues.

• Assess and advise on the effectiveness of BU risk and control environment

• Provide direction and guidance in the development of governance and control mechanisms within the BU.

• Execute, facilitate, and monitor risk governance mechanisms, including but not limited to, Risk and Control Self-Assessment (RCSA), key risk indicators, policies, risk committees and other required elements.

• Monitor issues assigned to BU, as well as those that have downstream or upstream impact to the BU, and ensure appropriate remediation.

• In conjunction with Compliance, Risk Management and Legal, monitor BU adherence to applicable policies, laws and regulations.

• Aggregate, integrate, correlate and report risks to ensure a full accurate assessment of risk is presented.

• Lead a process to review controls to confirm design is adequate and they are operating effectively.

• Communicate to BU senior leadership, regulators and Executive Committees key activities, trends, and events pertaining to risk, regulatory and audit reviews. Continue to promote various risk initiatives and their supporting metrics.

• Develop and maintain effective ongoing communication with leadership.

The role is hybrid based in Newark, NJ  

Candidate Profile 

Prudential is looking for an innovative and experienced candidate with deep risk management and and governance domain expertise and advanced technical knowledge and capabilities. The VP, Technology Risk Management, must think strategically while executing tactically and have hands-on experience developing risk insights and solution recommendations.

The VP, Technology Risk Management must be an effective collaborator who can influence without authority, build consensus across diverse stakeholder groups, and communicate complex technical concepts to business audiences while translating business requirements into technical solutions. 

Required Qualifications and Experience: 

• 15+ years of experience in technology, operational risk, audit or related field with experience managing a risk program or control function which includes creation of application of risk frameworks, policies, standards, KRI’s, mitigation strategies, escalation and exception processes.

• Proven experience implementing risk frameworks, to identify, manage and monitor risks in a structured approach (eg. NIST, COBIT, and ITIL) with demonstrated ability to design, implement, and execute risk-based governance processes .

• Strong knowledge of regulation and regulatory guidance such as GDPR, FFIEC, and SOX and proven experience building processes that support the guidance and regulations

• Must have a strong grasp of the technology tools and process with a focus on:

  • Emerging technologies

  • Cybersecurity, including data loss prevention, firewalls, encryption, intrusion detection systems, and secure coding practices etc.

  • Data management, including understanding data protection laws, data governance, and data quality management.

• Demonstrated ability to partner with both business and