Segment Risk Manager - Technology Governance

Description

Summary:

The Segment Risk Manager – Technology Governance supports Information Technology Risk & Control (ITRC) activities and application governance across the Enterprise Payments application portfolio. This role is responsible for the day-to-day administration, monitoring, review, and challenge of established enterprise application governance activities.  The Segment Risk Manager – Technology Governance serves as a technical governance consultant and translator between enterprise policy, standard, control, and process owners and Payments business, product, application, and technology teams.

The role helps stakeholders understand applicable requirements, navigate enterprise governance processes, and complete required activities accurately and timely.  This role performs routine Information Technology Risk Management (ITRM) reviews and approvals, evaluates the substance and quality of risk documentation and supporting evidence, monitors governance obligations, and escalates concerns requiring additional attention. The Segment Risk Manager – Technology Governance also owns recurring ITRM reporting and provides context regarding material changes, risk trends, overdue obligations, and recurring concerns.

Duties & Responsibilities Provide day-to-day ITRM governance support across the Enterprise Payments application portfolio, supporting adherence to established enterprise application governance, risk, and control requirements. Serve as a technical risk consultant and translator between enterprise policy, standard, control, and governance owners and Payments business, product, application, and technology teams, helping stakeholders understand requirements and successfully navigate applicable governance processes. Perform first-line review and challenge of application governance activities, documentation, and supporting evidence to assess whether requirements are addressed completely, appropriately, and with consideration of the underlying risk.

Provide risk consultation, monitoring, and challenge while reinforcing appropriate ownership, ensuring execution and remediation responsibilities remain with accountable application, product, business, and technology teams. Maintain visibility into findings, issues, remediation activities, control exceptions, and risk acceptances affecting Payments applications; provide day-to-day consultation and escalate significant delays, concerns, or governance gaps as appropriate. Perform initial review and challenge of technology risk exceptions and risk acceptance requests, assessing rationale, compensating controls, remediation plans, target dates, and recurrence and providing recommendations to the Segment Risk Manager Sr.

Monitor application governance activities through established enterprise reporting and notification processes, including Service Now and Archer, engaging accountable Payments stakeholders when action is required and escalating significant timeline or data-quality concerns. Own and interpret monthly ITRM reporting for Enterprise Payments, using Service Now, Archer, Tableau, Power BI, and other applicable sources to ensure information is accurate, complete, timely, and appropriately challenged and to communicate the context behind material changes and trends.

Apply technical risk knowledge to understand and communicate application, infrastructure, cybersecurity, vulnerability, and control conditions, including interpreting technical architecture, integration, infrastructure, and data-flow diagrams and engaging effectively with technology teams. Identify and escalate technical or governance concerns, articulating why a condition may present risk, whether it appears isolated to an individual application or may warrant broader…