LEAD IT RISK & OPS ADVISORY
WHAT IS THE OPPORTUNITY?
"The IT Risk Advisor Lead will be focus on leading the implementing frameworks designed to identify, evaluate, and manage technology-related risks and controls across the aligned Technology business or function. Responsibilities include integrating that framework with business operations and keeping leadership, key stakeholders informed of new and existing technology risks, leading or supporting various programs, including partering with internal teams and businesses on risk and control self-assessment (RCSA), process, risk, and control, and other risk policies, standards, and processes.This individual may be asked to supervise / coach a team of risk professionals and is part of a function that offers an Internal IT Risk Consultancy and acts as Trusted Advisors to IT FLoD to help identify potential risks, risks, how to manage and implement risk management solutions on the following but not limited to safety and security policies, business continuity and recovery.
Want more jobs like this?
Get Computer and IT jobs in Jersey City, NJ delivered to your inbox every week.
Technology and Innovation Division
As a member of City National's Technology & Innovation group, you will drive, develop, and maintain solutions for clients and colleagues. This is an exciting time of technology advancement and innovation across the bank, particularly within our technology teams.
What you will do
- Function as SME for aligned business units, quantify risk exposures within the business including operational, information, third party risk, and technology etc
- Act as a lead to implement and improve internal controls as part of the risk management framework created by SLoD, which includes assessment, reporting, metrics, monitoring and testing to mitigate risks
- Plays an active role in partnership with FLoD to develop action plans to address identified control breaches/deficiencies, completing root cause analysis and implementing routines to track, monitor and report issues in compliance with new end-to-end issue management process for effective and timely execution of remediation plans
- Ensure controls related to technology risk such as payment systems, access management, etc. risk management are sound and effective and implemented
- Supports internal auditors and regulators to ensure policies, strategies and performance meets enterprise risk and control standards and regulatory expectations.
- Encourages and fosters a risk-aware culture and mindset among employees, contractors, and service providers
- Take an active role in supervising, training and developing a team of risk professionals as needed
- Strong understanding of controls and risk management concepts, including risk assessments and evaluating and testing of internal controls
- Vendor management/ third party experience required
- Be able to drive change and communicate related policies, procedures, and guidelines; and play a key risk management role in large scale projects"
- Employs and fosters a risk-aware culture and mindset among employees, contractors, and service providers Supervise, train and develop a team of risk professionals as assigned
Must-Have
- Bachelor's Degree or equivalent
- 10 plus years of experience in IT risk and control or audit function
- 7 plus years of experience in cyber security, payments platform, fraud, and/or technology risk management etc.; risk management, compliance, and/or audit in a highly regulated environment
- 7 plus years of experience working at a major financial institution on audit and/or management initiatives programs, including management responsibilities
Skills and Knowledge
- Experience with process documentation, risk and control assessments, and designing/executing IT General Controls (ITGC), test scripts
- Experience and/or knowledge in working with multiple IT risk and controls domains such as identity and access management, privilege success, vulnerability management privacy, incident response etc.
- Experience and working knowledge of any NQSQL, databases, design, and architecture
- Experience in designing, implementing, and operationalizing continuous control testing and monitoring of technology controls
- Combined experience in IT external audit, IT internal audit and technology risk and/or IT General control assessment for compliance with Sarbanes Oxley (SOX)
- Understand of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations
- "Preferred "Big Four" or Large Regional Firm IT audit or risk management consulting experience
- Preferred: Professional in Project Management (PMP), Six Sigma Black, Belt or Green Belt professional certifications and/or project management experience
- Proficient in Microsoft Office Product Suite, SharePoint
- Solid problem solving, analytical (including qualitative analysis), research, and quantitative skills
- Strong work ethic, ability to make decisions and work under tight deadlines; goal-oriented and takes initiatives
- Effective presentation and communication (verbal and written) skills
- Experience with process documentation, risk and control assessments, and designing/executing IT General Controls (ITGC), test scripts
- Understand of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations
- Experience and/or knowledge in working with multiple IT risk and controls domains such as identity and access management, privilege success, vulnerability management privacy, incident response etc.
- Combined experience in IT external audit, IT internal audit and technology risk and/or IT General control assessment for compliance with Sarbanes Oxley (SOX)
- Experience in designing, implementing, and operationalizing continuous control testing and monitoring of technology controls
- Ability to support management with deliverables needed within a complex environment; and make recommendations as needed
- Possess a consultative/advisory mindset and approach in dealing with key stakeholders across the organization
- "
Compensation
Starting base salary: $111,408 - $189,738 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and/or commissions.
To be considered for this position you must meet at least these basic qualifications
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Benefits and Perks
At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues. Get an inside look at our Benefits and Perks.
INCLUSION AND EQUAL OPPORTUNITY EMPLOYMENT
City National Bank is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other basis protected by law.'
ABOUT CITY NATIONAL
We start with a basic premise: Business is personal. Since day one we've always gone further than the competition to help our clients, colleagues and community flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues to drive phenomenal growth today. City National is a subsidiary of Royal Bank of Canada, one of North America's leading diversified financial services companies.