Director IT Embedded Risk
HybridJersey City, New Jersey, United States
Job Summary
Lead targeted IT risk assessments and manage the risk profile for aligned IT capabilities within the Enterprise Product & Platform Engineering department. Proactively identify gaps in processes and controls, analyze and remediate risk items, and drive successful action plan and issue closures by assessing root causes. Develop and communicate department risk policies, procedures, and standard methodologies while contributing to documentation across cloud, mainframe, network, and database technologies. Advise on inherent and residual risk assessments, validate accuracy of second-line defense reviews, and lead root cause analysis for risk incidents. Cultivate regulatory awareness, ensure compliance, and mentor team members on technical capabilities and risk management concepts.
Required Qualifications
- Minimum of 10 years of related experience
- 10+ years' experience as a senior risk and control professional
- preferably within technical auditing/ examination
- focus in financial services industry (or other highly supervised industry)
- Demonstrated ability to oversee and own an IT risk team that serves as a decision-making tool for management
- Strong planning and project management skills
- Ability to lead technical, risk focused discussions with key stakeholders to analyze vulnerabilities and deviations from standards (e.g., security requirements)
- Understanding and working knowledge of cloud technologies including cloud engineering, private cloud delivery, and server virtualization
- Understanding and working knowledge of disaster recovery and infrastructure resiliency concepts including data center operations and rotation
- Technical understanding of mainframe and network technologies including application of quantum computing readiness principles (encryption, key management)
- Exposure to risk and control concepts including technical diagrams (network diagrams), risk and control identification, control evaluation (design and operating effectiveness), and related reporting
- Excellent analytical and problem-solving including for data identification, analysis, measurement and reporting
- Excellent written and verbal communication skills; ability to tailor messaging to various levels of management including to risk committees
Desired Qualifications
- BA / BS and/or equivalent experience
- Advanced degree preferred
- Audit or Technical Certification preferred (CISA, CRISC, CISM, CISSP, etc)
- Background in financial services information technology or Big 4 technical advisory services a plus
- Highly motivated, detail-oriented, self-starter, who can set priorities, take initiative and work both independently and proactively in a diverse, multi-location team environment
- Knowledge of the security markets, post-trade processing and clearing and settlement infrastructure preferred
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.