Technology Risk Manager

Our Corporate Bank group is a technology centric business, with an increasing move to real-time processing, an increasing appetite from customers for integrated systems and access to supporting data. This means that technology is more important than ever for the business.

The CIO Corporate Bank (CB) division sits in the Banks Technology, Data and Innovation (TDI) group. The Risk and Control (R&C) team ensures the Bank's technology control priorities are effectively implemented across CIO - CB. The R&C team offers dedicated support for each Chief Information Officer (CIO) business line, advisory services for control responses, and program management services for broad control uplifts. The team's mission is to reduce the organization's technology risk exposure by implementing key bank controls, ensuring appropriate and timely resolution of audit and regulatory issues, and participating in the Bank's design of control implementations. Therefore, a role on the R&C team is integral in supporting the front-line management in identifying, assessing/measuring risks, developing/implementing remediation actions, and monitoring risks.

We are looking for a technology risk manager (also known as embedded risk team lead) to join the Risk & Control team to ensure robust and sustainable control governance across CIO CB, in particular for CB Data and head for India Risk and Control team. You will be responsible for supporting the CB Chief Data Office in managing audit/regulatory/self-identified findings, participating in regulatory and audit exams, monitoring stakeholders compliance with key risk indicators, and ensuring controls are implemented effectively and sustainably. Your role will be integral in supporting the front-line management in identifying and assessing/measuring risks, determining remediation plans, monitoring levels of risk, and implementation of remediation. You will work directly with CIO-1s, the CIO Corporate Bank Risk Leads, senior technology management, business and operations stakeholders, regulatory management, and other embedded risk teams and will represent CB Risk & Control . As a senior member in the region, you will spearhead risk initiatives within the region and will oversee India applications. As a Tech Risk and Controls Director, you will play a pivotal role in shaping and implementing the firms technology risk management strategy.

Your Key Responsibilities:

• Partner with CB CDO, in risk management and control implementation. Create deep and productive relationships with the teams and finding owners for audit/regulatory/self-identified issues to ensure overall risk posture for the area is improved.
• Support CIO-1 portfolio(s) in managing audit/regulatory/self-identified findings to ensure appropriate and timely resolution of risks/gaps in controls, and resolve non-compliance with Bank policies, procedures and processes and non-compliance with regulations and laws. Review and revise findings lifecycle event documentation.
• Provide strategic direction on risk management matters to senior leadership including implementation of detailed data driven narratives to inform leadership of risks related to IT and Cybersecurity topics.
• Provide credible challenge across all information technology and cybersecurity enabling business growth while ensuring that risks remain within appetite.
• Participate in, and coordinate with technology stakeholders, on internal and external audits and regulatory exams
• Ensure Risk & Control topics and standards are effectively included in all Change Programs related to CB Data, in particular within the perimeter of the EDM Program. Ensure appropriate senior management awareness/oversight of follow-up on action items to resolve identified technology issues
• Support application teams in control implementation requirements
• Ensure risk remediation programs are initiated and executed. Design and implement processes to test effectiveness and sustainability of technical controls.
• Develop strategies for reducing the risk exposure of CIO CB portfolio(s), including preparedness of critical applications for audit and regulatory exams and working with application owners to address and prevent common risk issues
• Assist application owners and other technology stakeholders in identifying and documenting risks and developing remediation
• Tracking and reporting on CIO CB portfolio(s) key risk indicators (KRI) and control uplift programs. Assisting application owners in developing plans to ensure compliance with KRIs. Close control gaps.
• Ensure risk remediation programs are initiated and executed in line with the Banks policies, procedures and standards.
• Work with the application teams and control owners to identify and resolve potential issues in control design. Advise on effectiveness metrics, ensure control design includes proper evidence, and provide input to the design and effectiveness of centrally provided tooling.
• Create risk awareness and positive attitudes through specialized trainings and educate the wider Corporate Bank CDO stakeholders regarding Risk & Control.
• Develop and guide a culture of talent development to meet business objectives and strategy.

Your Skills and Experience:

• Excellent communication skills, both written and verbal to present ideas and concepts effectively
• Extensive experience (15-20 years) in technology risk management and risk advisory
• Strong understanding of three lines of defence model and compliance frameworks,
• Experience with regulatory environments and financial services technology.
• Robust knowledge and experience of data risks, in particular data-related technology controls, - policies, - standards and - tools
• Excellent analytical and investigatory skills to identify underlying technology issues
• Extensive experience in assessing risk, writing issues, and developing appropriate corrective actions
• Demonstrate viable solutions and problem solving
• Relevant experience working with auditors, regulators and external auditors on exams, reports and information requests
• Prefer experience with designing and testing technology controls and processes
• Prefer technical background (application development, infrastructure engineering, etc.)

Role:

Industry Type:

Department:

Employment Type:

Role Category:

Education

UG:

PG: