Technology Risk Specialist

Technology Risk Specialist   The Technology Risk Specialist is responsible for providing oversight, consulting and risk management assessment/support, and reporting functions relative to Comerica's Lines of Business (LOBs) and other divisions; for utilizing their specialized skillset to engage with business partners and shared services stakeholders to provide consulting support to drive awareness and compliance with the Bank's enterprise risk management framework, policies and standards; ensure independent risk assessments, oversight and consulting support to promote proactive risk identification, mitigation and remediation of risk, to ensure protection of customers' and the Bank's data and other assets. May interact with all business areas Geographical locations may include any site where IT activities are occurring.   Position Responsibilities:

• Execute Second Line of Defense (SLOD) risk management functions relative to
  Technology Risk, Information Risk/Security risk management by working with the LOBs
  and other bank stakeholders/divisions to risk review areas, related processes, etc.,
  providing credible challenge regarding risk assessments, controls, strategic direction and
  other activities pertaining to the LOBs and Comerica. Ensure awareness of technology
  and information risk/security risks in the LOBs/Comerica and provide consulting support
  and direction to drive proactive risk identification, mitigation/remediation, and accurate,
  complete monitoring and reporting. Ensure awareness of current technology,
  information risk/security risk management top line and emerging risks, industry best
  practices, controls and solutions.
• Support development/documentation of required SLOD risk management
  functions/routines and controls, including deriving accurate and complete technology
  risk and information risk/security profiles. Technology Risk, Information Risk/Security
  Risk Management reporting of noted risks, support mitigation/remediation
  plans/activities required to monitor risks, and support execution of SLOD functions
  w/business partners. Prepare related reporting to ensure enterprise / management /
  board level awareness of Technology Risk, Information Risk/Security Risk Management
  profiles at aggregate and dis-aggregate levels.
• Engage with Bank stakeholders/divisions to ensure awareness, documentation, andaccurate reporting of identified and potential risks (i.e. top line and emerging risks) impacting Comerica LOBs/functions from a Technology Risk, Information Risk/Security Risk perspective. Execute SLOD review, credible challenge to complete regulatory risk assessments in compliance with guidelines/requirements and/or certifications (i.e. PCI DSS, FFIEC, State Certifications, etc.).
• Act as a Subject Matter Expert in technology and information risk topics to support all
  SLOD functions, assessments, reviews, audits and related responsibilities of the second
  line of defense.