IT Risk Manager

Early Warning has been powering the U.S. financial system for over thirty years with solutions such as Zelle and Paze. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

The Manager, Risk Management is responsible for building and coordinating a centralized first line of defense risk and internal control program for Early Warning’s specified department or function. The role aligns with the company’s Enterprise Risk Management Leadership around the structure of the three lines of defense (3

LOD) Program to ensure consistency in implementation and operationalization across the enterprise.

• Assist Senior Risk Managers and the LOD1 Director in meeting departmental goals and objectives.
• Build and manage the business line’s centralized LOD1 function; act as liaison to Enterprise Risk Management, Operational Risk Management, and Compliance.
• Own and maintain the business line’s process inventory and internal control environment inventory.
• Work with Compliance and other Risk functions to obtain a high‑level understanding of and monitor applicable regulations and requirements.
• Partner with Enterprise Risk Management in the execution of Risk and Control Self Assessments.
• Own and maintain the business line’s detailed process and technical recovery plans.
• Partner with Business Continuity Management on business line’s participation in BC/DR tests.
• Oversee and monitor third‑party relationships, including performance and risk management.
• Assist the business line in designing and building process maps aligned with Early Warning’s Process Classification Framework; design, maintain, and report metrics demonstrating control effectiveness.
• Identify and self‑report issues through the ERM Self‑Identified Issue Process, individually and collaboratively with other LOD1 members.
• Ensure risk remediation plans exist, are sufficient, and are tracked to completion with on‑time and sustainable outcomes; enforce action plans by Risk Owner.
• Support the business line’s Risk Acceptance Forms (RAF) process when applicable.
• Provide risk reporting and explanation for business reviews, audit or management committee meetings; collaborate with Business Intelligence to design and implement risk reports for management.
• Deliver education and awareness of risk ownership essentials.
• Continuously monitor and update control environment assessments, keeping abreast of significant control issues, trends and developments; perform internal control effectiveness test plans and procedures.
• Support the company’s commitment to protect the integrity and confidentiality of systems and data.

• Education and/or experience typically obtained through completion of a bachelor’s degree in Business Administration, Finance, Accounting, or related field.
• Minimum of eight or more years of progressive audit, operational risk or other risk management experience, or proven related business experience.
• Good understanding of risk management and internal control leading practices within specialized area of focus.
• Demonstrated ability to work effectively in a complex, highly regulated environment.
• Working knowledge of regulatory requirements within specific area of focus.
• Effective communication, organization and presentation skills.
• Effective influence management skills.

• Knowledge of COSO’s Internal Control – Integrated Framework or similar.
• Certification in risk management.
• First line of defense risk management experience.

Work is primarily sedentary and requires extensive use of a computer and sitting for periods of approximately four hours. Occasional standing, walking, kneeling, and reaching may…