Managing Director IT FLCO - Infrastructure Risk Lead

If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer.  

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

The Managing Director, Front Line Controls Officer will play a critical leadership role in overseeing and strengthening the bank’s technology and infrastructure control environment. This individual will lead a high-performing team or technology risk professionals and serve as a risk partner to the bank’s leadership over Infrastructure, Project Management, and Architecture to ensure that technology risks are proactively identified, assessed, and mitigated across the enterprise. Areas of focus include Infrastructure Management, Cloud Security and Operations, Identity and Access Management (IAM), Secure SDLC, Agile Delivery, and Project Governance and Execution.

Key responsibilities include building and maintaining a comprehensive control inventory, enhancing the risk and control self-assessment (RCSA) program, and ensuring alignment with internal policies, regulatory requirements, and industry best practices. The role will also provide risk partnership for key technology processes, including cloud security and configuration, asset management, secure SDLC, patch management, incident and problem management, capacity planning, database management, identity access management, and modern DevSecOps practices. The ideal candidate will bring deep expertise in technology risk management and internal controls within the banking sector that enable the candidate to serve as the "voice of risk" in strategic infrastructure initiatives and large-scale, high-visibility regulatory remediation programs.

Key Responsibilities

• Leadership & Strategy: Oversight and management for multiple Technology Front Line Unit (FLUs) aligning with the vision and objectives set by the Chief Controls Officer and the IT First Line Controls Officer.  Lead and develop a high-performing team of risk professionals, fostering a culture of accountability, continuous improvement, and proactive risk ownership.  Leverage agile principals to operate transparently.
• Controls Design & Inventory: Collaborate with the Technology Front Line Unit to design, implement, and maintain effective controls that mitigate identified risks across infrastructure, cloud, IAM, SDLC, and project management domains. Leverage technical expertise and industry knowledge to build and maintain a comprehensive control inventory, ensuring traceability to risks, regulatory requirements, and internal policies. 
• Proactive Oversight: Drive the early identification of control issues, emerging risks, and process deficiencies. Lead root cause analysis and oversee the development and execution of robust, sustainable remediation plans to address control gaps and prevent recurrence.  Analyze risk data to assess likelihood, impact, and trends, and provide actionable insights to senior leadership.
• SDLC Engagement: Partner closely with Enterprise Architecture and the Project Management Office to support risk-informed decision-making across the technology development lifecycle; serve as “voice of risk.”  Effectively integrate into key tollgates to provide strong risk support.  Foster a culture of “shifting left” and provide counsel informed by industry leading practices on Infrastructure as Code, secure CI / CD pipelines, and modern patch management.
• Cloud Partnership:  Perform risk evaluations of material changes in infrastructure, cloud, and networking environments, including new cloud services and architectural patterns. Maintain ongoing engagement with cloud operations teams and ensure new services and configurations are appropriately secured.
• Infrastructure and Availability:  Evaluate the risk impact of incidents and problems on the control environment and recommend enhancements to prevent recurrence.  Provide governance and oversight of patch management programs, ensuring timely remediation of vulnerabilities and alignment with risk appetite.
• RSCA Program Management: Lead the execution and do