Sr Risk and Compliance Manager

Job Title: Senior Risk Compliance Manager, Security and Privacy                                                                                     

Job Summary: 

The Senior Risk and Compliance Manager analyzes and administers internal risk and compliance programs to ensure that product capabilities, policies and procedures related to Security and Privacy are well defined and implemented. They work closely with teams across functional areas and geographies to ensure that the ACI products and operations comply with regulatory, network, and enterprise policies and standards. The role involves creating formal procedures to understand compliance obligations (e.g. PCI, GLBA, DORA, ISO 20022, SWIFT, etc.) necessary to define and drive product compliance and enable effective management of associated risk and compliance controls and requirements. The manager is responsible for the creation, testing, and documentation of regulatory, financial, operational, and computer system records for security and privacy integrity and completeness. They collaborate with management in all areas to define and refine the risk and compliance function as it relates to overall business activities.

Job Responsibilities: 

• Provides leadership, support, and execution of ACI’s risk compliance programs in Information Security, and in Consumer and Commercial Information Protection and related requirements (e.g. PCI, GLBA, DORA, ISO 20022, SWIFT, etc.).
• Supports the business unit’s alignment with risk compliance requirements and risk processes to ensure that systems, products and practices comply with enterprise policies and standards, and applicable regulations.
• Provides subject matter expertise to stakeholders within the business units regarding compliance to information security, and consumer and commercial information protection regulations for assigned products and operations. 
• Understands and monitors the regulatory environment applicable to the business unit; Assess and communicate changes that may impact the business; Translate regulatory guidance into practical and actional requirements; Provides regulatory change management oversight and execution / implementation of requirements; serves as a conduit for emerging regulations; advises on changes within operations and activities that may trigger additional existing compliance implications.
• Proactively identifies, assesses, mitigates, monitors, and manages risk within the business unit; Identifies control gaps and drives remediation efforts to completion; Elevates, tracks, and reports on risk issues; understands the business owns the risk and provides assistance and guidance where appropriate; drives remediation to completion and holds the business unit accountable for ownership.
• Manages multiple risk and compliance initiatives; communicates and escalates to leadership (both within the business unit and cross functional) as appropriate.
• Collaborates with the organization’s vertical and horizontal functions to address risk and compliance issues; consults with business leaders and stakeholders on solutions based on good internal models and advice.
• Interprets / translates across the functional areas, including technology, product, and the centralized risk function. 
• Describes risks in business terms such as exposure, financial risk, customer risk, compliance, and reputational risk.
• Recognizes that risk management and compliance are about preparation and prevention, as much as response and recovery.
• Influences the entire organization to create a more risk-aware culture within the organization.
• Partners and builds trust with key business partners, is a respected and sought-after resource.
• Is intellectually curious, learns the business; Provides insight as well as information.
• Continually drives for excellence within their team(s), aligned business areas, and ACI as a whole.

In this role, this individual can look forward to:

• Provides leadership, support, and execution of ACI's risk management and compliance framework across ACI’s business segments.
• Supporting the prioritization of risk and compliance program efforts within the business.
• Providing thought leadership, risk-based guidance and advisory support based on the business unit operations; Recommending practical solutions to ensure the business understands and meets applicable risk and compliance requirements.
• Partnering with internal SMEs, risk domain leaders, and legal partners on matters including interpretations of law, regulations, indirect compliance obligations, and compliance with client commitments.
• Addressing what is occurring now; Analyzes the risk and regulatory landscape to anticipate and address future needs.
• Creating internal s