IT Risk Officer - IT Asset Management

Overview

This role will work with a team of First Line Risk Management associates responsible for working across Information Technology to develop and implement cutting edge risk solutions to ensure the Bank's continued stability and success. The IT Risk Officer will partner with IT Senior Leadership and their teams to identify, measure, and remediate risks in an open, collaborative environment where new ideas and solutions are encouraged. Responsible for providing advice, guidance, and effective challenge to the IT Asset Management (ITAM) program and related risk management, governance, and oversight processes. Consult on the design and implementation of appropriate controls to mitigate risks to an acceptable level. In addition, perform key risk management activities and work with stakeholders on new and changing risk management programs.

• Risk Oversight & Monitoring - Provides objective oversight of risks through effective challenge using defined methodologies and subject matter expertise. Provides leadership, consultation, and support for risk management. Fosters business unit relationships and implements training to promote engagement in risk management programs, including compliance with all risk policies and standards. May assist with presentations, workshops, and other materials as necessary to communicate risk management tactics. May provide guidance to less experienced associates in the department.
• Risk Management Proficiency - Maintains a strong knowledge of risk management developments or changes within the organization, industry, and market. Develops active relationships within professional networks to stay current on emerging issues and regulatory requirements. Communicates risk vision and regulatory requirements to applicable stakeholders, including less experienced associates in the work group.
• Business Support - Provides support for business programs, initiatives, and leaders. Serves as a consultant on risk best practices, processes, and regulatory requirements. Facilitates reporting and interdepartmental collaboration.

• • Knowledge of risk management principles, techniques, and practices,
  • Ability to work effectively with associates, managers, senior executives, second line of defense, and internal audit,
  • Knowledge of regulatory guidance and industry frameworks pertaining to enterprise risk, operational risk, and technology risk,
  • Knowledge of IT Asset Management (ITAM) and Configuration Management Database (CMDB) processes, risks, controls, and platforms (e.g., ServiceNow)
  • Knowledge of issue management lifecycle and processes
  • Experience conducting Risk and Control Self-Assessments (RCSAs) and/or auditing/control testing
  • Excellent oral and written communication skills