Associate Director, BRAC Advisory Technology

This role provides risk governance and advisory support for the Technology Group with a focus on risk management, regulatory compliance, control effectiveness, metrics, , and risk appetite alignment. The Business Risk Advisory Controls  Team (BRAC) operates in a matrix environment, driving oversight, strengthening the control environment, and leveraging data-driven insights to enhance risk management practices and decision making.

Key Responsibilities:

+ Provide expert Regulatory Compliance support, guidance, and advice to T&O in support of the Enterprise Compliance Program (ECP) related to Technology.

+ Identify and communicate new and revised regulatory changes via the Enterprise Regulatory Development Framework (ERDF) and participate in execution of activities for implementation of Enterprise Compliance Program (ECP).

+ Contribute to the sound, efficient operation of T&O by improving the understanding and execution of Risk requirements in accordance with the Enterprise Operational Risk Management Framework (ORMF) related to technology.

+ Performance of risk assessments in accordance with ORMF and ECP requirements.

+ Maintain the T&O Process, Risk and Control (PRC) Framework, Tool, and Control Library to provide management a holistic view of the control environment

+ Manage oversight for all enterprise-level new/revised policies to determine T&O impact, including requests for review/feedback and communication of key policy changes

+ Leverage data to perform root cause and predictive analysis, and provide qualitative and quantitative risk and compliance management report.

Core Knowledge:

+ At least 10+ years of Technology or Financial industry work experience with a graduate or post-graduate degree in computer science, engineering, information systems, math or business management

+ At least 5 years of experience in risk and compliance domain with an ability to analyze and evaluate the observations based on compliance, operations, risk model and performance.

+ Ability to review all written materials for compliance with state, federal, and contractual regulations and draft all policy language and is desired

+ Strong data analytics and presentation skills, including advance level fluency in using Excel, Word and PowerPoint and other data analytics dashboard tools.

+ Ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.

+ CRISC, CGEIT, CISA, CISM, PMP and/or Cloud compliance certification an asset

+ Good data analytics and reporting skills including advance excel and power point skills and skills to use desktop analytics tools.

+ Knowledge of software development practice, concepts/methodologies and technology obtained through formal training and/or work experience

+ Knowledge of data governance frameworks and how these are implemented in complex and large organizations.

+ Well versed in the technology issues affecting financial service organizations and cloud based application service providers

+ Understands the basic tenants of enterprise risk management process (Identify, assess, prioritize, treat and monitor).

Contributes to the business' accountability for the delivery of regulatory programs across applicable Tier 1 Risk Types. Contributes to the design of governance and control requirements for products, processes, and channels. Supports the design, development, automation, and coordination of evidence based controls across Credit & Counter party, Non Financial, Liquidity & Funding, Market, Strategic, Reputation, and Environmental & Social Risks. Supports effective and efficient compliance with regulatory obligations in alignment with the Bank's Risk Management Framework and approved Risk Appetite.

+ Makes recommendations to senior leaders on strategy and new initiatives, based on an in-depth understanding of the business/group.

+ Acts as a subject matter expert on relevant regulations and policies.

+ Acts as a strategic partner in which the program elements becomes an integrated component of the overall business/group strategies and helps drive business impact.

+ Prepares and briefs senior leaders on regulatory matters across multiple businesses/groups.

+ Supports multiple, similar business units with moderate complexity & business transaction risk.

+ Represents the business/group  on Governance/Risk Working Groups/Forums and provides regular updates.

+ Monitors and advises on management of risk requirements within the…