Associate Director, BRAC Technology

This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making.

• Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology.
• Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP).
• Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology.
• Performance of risk assessments in accordance with ORMF and ECP requirements.
• Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment
• Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes
• Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report.

• At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management
• At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance.
• Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired
• Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools.
• Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.
• CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset
• Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools.
• Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience
• Knowledge of data governance frameworks and how these are implemented in complex and large organizations.
• Well versed in the technology issues affecting financial service organizations and cloud based application service providers
• Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor).

Contributes to the business’s accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counter party, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank’s Risk Management Framework and approved Risk Appetite.

• Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.
• Acts as a subject matter expert on relevant regulations and policies.
• Acts as a strategic partner in which the program elements becomes an integrated component of the overall business/group strategies and helps drive business impact.
• Prepares and briefs senior leaders on regulatory matters across multiple…