AVP, Operational Risk – Information Technology Oversight

Job Description:

Role Summary/Purpose:

The Operational Risk Management team is part of the 2nd Line of Defense (2LOD) within Synchrony.   This role is responsible for performing independent operational risk oversight of information technology within Synchrony.  This includes assessing and monitoring risks related to IT programs, adoption of emerging technologies and 3rd party risks specific to the IT function.  The position reports to the VP, Information Technology Oversight.

Our Way of Working

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.

Essential Responsibilities

• Engage the Information Technology organization in reviewing and assessing operational risks in the deployment and use of technologies

• Monitor risks being accepted by the business and provide an independent assessment of the risk-taking activities

• Perform formal assessments of technology risks using common processes within Risk Management, including Targeted Reviews, Concurrent Reviews and Continuous Monitoring

• Independently investigate potential risks being taken by Information Technology teams and escalate through ORM processes

• Understand risks of usage of public Cloud Service Providers (CSP’s) and monitor required and recommended risk mitigation strategies for Synchrony Application migrations to public Cloud

• Understand risks of Generative Artificial Intelligence (GenAI) and monitor required and recommended risk mitigation strategies for use of GenAI in Synchrony.  Escalate GenAI as needed for Model Governance review

• Develop and implement new Risk Frameworks for Cloud, GenAI, and other emerging technologies leveraging available public best-in-class Frameworks to enable a consistent methodology for independent oversight and assessments of potential acquisitions and integrations made by Synchrony

• Monitor new technology introduction processes for consistent risk-based execution

• Contribute to and validate delivery on Alpha, Beta and General Availability requirements for Cloud and new technology certifications across IT teams (Applications and Infrastructure).  Confirm evidence provided for each certification and ongoing sustainability of requirements for each phase.