Sr. Business Continuity and Information Risk Associate

Sr. Business Continuity and Information Risk Associate

Country: United States of America

Position Summary:

The Sr. Business Continuity and Technology Risk Associate is responsible for ongoing oversight, assessment, management and reporting of technology and cybersecurity risks across Banco Santander International (BSI). This role is established in the second line of defense and requires collaboration across IT, CISO, Data Office, Operational Risk, Internal Audit and other relevant functional stakeholders within the organization in the management of Technology risks. An excellent understanding of the evolving regulatory landscape in the US and EU are vital for success in this role.

The day-to-day focus may vary depending on the requirements of the overall second line of defense program priorities directed by the Chief Operational Risk Officer and may include: planned or ad-hoc technical risk reviews, technical review of IT and security architectures, review and challenge activities of IT or Business initiatives, risk reporting, development as well as review and challenge of technical risk framework and methodologies.

Sr. Business Continuity and Technology Risk Associate reports to the Chief Operational Risk Officer.            

Position Duties / Responsibilities:

Program Development
• Direct the development and execution of projects for Banco Santander International (BSI) covering Business Continuity and Technology Risk Management (IRM) that comply with applicable regulations and identify milestones and compliance dates.
• Report and monitor conformance and delivery against project plans, making adjustments and recommendations, where justified.
• Drive culture of Technology Risk and Business Continuity Risk awareness and deliver required training.
• Direct risk measurement and monitoring processes and communicate results, recommendations and escalations to the BSI Chief Operational Risk Officer (CORO).
• Assess and communicate Technology and Business Continuity risk associated with all material activities/projects of the company.
• Act as liaison with group, holding company and entity counterparts for identification of best practices, standards, policy and program updates for TRM and BCM.
• Communicate to BSI CORO significant developments in the maturity of the Business Continuity Management and Technology Risk Management Program and Framework.
• Perform independent review and challenge with first line of defense (1LoD) and address risk and control self-assessment (RCSA) outputs for technology infrastructure.
• Support the development and implementation of the Technology Risk and Business Continuity Risk program strategy, policies and models.
• Prepare, summarize and report updates of technology risk management (TRM) risk drivers and business continuity management activities (BCM) to CORO and applicable stakeholders.
• Support implementation at the operating units by serving as Business Continuity risk management and TRM subject matter expert.
• Interact with other Risk Managers and department heads.

Compliance
• Coordinate with the first line of defense to implement the new and existing regulatory standards regarding governance, the Technology and Business Continuity Risk Management Framework and related policies and procedures.
• Lead in the execution and review of concluded risk assessments, attestations and perform IT compliance control testing review and challenge.
• Create and report auditable measurements, remediation of findings and report recommended course of action to the BSI CORO, on a routine basis, for all matters related to TRM and BCM.
• Maintain regulatory compliance and credibility with regulators at the Federal Reserve Board, with respect to Business Continuity risk management and Technology risk issues.
• Facilitate effective regulatory examinations and audit reviews when required.
• Oversee the review of reports and updates from GDPR, SOX, FFEIC, OCC, GLBA and Group for Operational Risk Management effectiveness in support of the BSI CORO and alignment of objectives.
• Prepare and provide reports and evidentiary support for internal and external auditors, regulators and the bank’s management.
• Liaise with Banco Santander International (BSI) headquarters to ensure corporate Business Continuity and Technology Risk Management requirements are being met.
• Build relationships and communication channels with compliance community including internal and external auditors, departments and managers.
• Provide functional and analytical support for the bank’s Governance Risk and Compliance and BCM tools and applications.

Business Continuity Management
• Coordinate with the first line of defense to implement the new and existing regulatory standards regarding gov