Segment Risk Manager - Technology Governance

Description

Summary:

The Segment Risk Manager – Technology Governance supports Information Technology Risk & Control (ITRC) activities and application governance across the Enterprise Payments application portfolio. This role is responsible for the day-to-day administration, monitoring, review, and challenge of established enterprise application governance activities.

The Segment Risk Manager – Technology Governance serves as a technical governance consultant and translator between enterprise policy, standard, control, and process owners and Payments business, product, application, and technology teams. The role helps stakeholders understand applicable requirements, navigate enterprise governance processes, and complete required activities accurately and timely.

This role performs routine Information Technology Risk Management (ITRM) reviews and approvals, evaluates the substance and quality of risk documentation and supporting evidence, monitors governance obligations, and escalates concerns requiring additional attention. The Segment Risk Manager – Technology Governance also owns recurring ITRM reporting and provides context regarding material changes, risk trends, overdue obligations, and recurring concerns.

Duties & Responsibilities

Provide day-to-day ITRM governance support across the Enterprise Payments application portfolio, supporting adherence to established enterprise application governance, risk, and control requirements.

Serve as a technical risk consultant and translator between enterprise policy, standard, control, and governance owners and Payments business, product, application, and technology teams, helping stakeholders understand requirements and successfully navigate applicable governance processes.

Perform first-line review and challenge of application governance activities, documentation, and supporting evidence to assess whether requirements are addressed completely, appropriately, and with consideration of the underlying risk.

Provide risk consultation, monitoring, and challenge while reinforcing appropriate ownership, ensuring execution and remediation responsibilities remain with accountable application, product, business, and technology teams.

Maintain visibility into findings, issues, remediation activities, control exceptions, and risk acceptances affecting Payments applications; provide day-to-day consultation and escalate significant delays, concerns, or governance gaps as appropriate.

Perform initial review and challenge of technology risk exceptions and risk acceptance requests, assessing rationale, compensating controls, remediation plans, target dates, and recurrence and providing recommendations to the Segment Risk Manager Sr.

Monitor application governance activities through established enterprise reporting and notification processes, including ServiceNow and Archer, engaging accountable Payments stakeholders when action is required and escalating significant timeline or data-quality concerns.

Own and interpret monthly ITRM reporting for Enterprise Payments, using ServiceNow, Archer, Tableau, Power BI, and other applicable sources to ensure information is accurate, complete, timely, and appropriately challenged and to communicate the context behind material changes and trends.

Apply technical risk knowledge to understand and communicate application, infrastructure, cybersecurity, vulnerability, and control conditions, including interpreting technical architecture, integration, infrastructure, and data-flow diagrams and engaging effectively with technology teams.

Identify and escalate technical or governance concerns, articulating why a condition may present risk, whether it appears isolated to an individual application or may warrant broader review, and when additional management attention is needed.

Collaborate with Enterprise Payments leadership and partners across Technology, Information Security, Identity and Access Management, Data Management and Governance, Service Continuity, Corporate Risk, Compliance, and Internal Audit, and support ITRM strategy, portfolio analysis, enterprise change planning, and other assigned risk initiatives.

Perform other duties as assigned.

Basic Qualifications :

Bachelor’s degree or in lieu of a Bachelor’s degree, 4 additional years of segment-specific or risk related experience may be considered

Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk.

Preferred Qualifications:

• Advanced knowledge of risk management principles and regulatory compliance requirements.
• Experience in vendor risk management, particularly in evaluating and overseeing third-party applications.
• Experience in information technology risk management, application risk, technology controls, application governance, cybersecurity, or a related discipline.
• Technical knowledge of application architecture, infrastructure, cybersecurity vulnerabilities, and technology controls.
• Ability to understand the nature, severity, and potential impact of technology vulnerabilities and communicate related concerns to technical and nontechnical stakeholders.
• Ability to analyze risk and governance data, identify significant changes, and clearly explain the business and risk context behind reporting results.
• Ability to translate technical, risk, and governance requirements into clear and actionable expectations for business, product, application, and technology stakeholders.
• Strong interpersonal skills and ability to build strong partnerships and work collaboratively with all businesses.
• Strong consulting skills and the ability to influence outcomes and reinforce accountability without direct authority.
• Ability to recognize when a technical or governance concern may extend beyond a single application and escalate the observation for broader review.
• Ability to deal with ambiguity, multi-task and work in a fast-paced environment.
• Demonstrated curiosity and commitment to developing deeper knowledge of technology, cybersecurity, application governance, and the Payments business. The Segment Risk Manager is responsible for oversight and administration of operational and regulatory risk strategy programs for a business segment.
• Exempt Status: (Yes   = not eligible for overtime pay) ( No   = eligible for overtime pay)
• Yes
• Workplace Type: Office
• Our Approach to Office Workplace Type
• Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.