Director, Risk Management – Information Security

Responsibilities

• Lead a high‑performing team of Information Security and Cyber Analysts responsible for strengthening the organization’s security posture and risk management capabilities
• Provide strategic oversight and governance of risk and compliance activities across the enterprise
• Ensure effective identification, measurement, monitoring, control, and reporting of key risks
• Guide the organization in understanding and managing risk through robust practices and processes that keep exposures within acceptable levels
• Drive cross‑functional alignment, collaborating with business units and control partners to ensure risk objectives are achieved across multiple operational domains
• Leverage deep expertise in risk frameworks—including KRIs, risk appetite, RCSAs, and control testing—to enhance risk insight and decision‑making
• Oversee the formulation of stress test plans, identification, assessment and documentation of risks and controls, including risks associated with new or modified products, services, distribution channels, regulations and/or third‑party operations
• Direct the oversight of model risk through model documentation review, assessment of performance monitoring, model validation, and use implementation
• Develop risk dashboards and reporting formats in alignment with risk appetite/profile

• Bachelor’s degree in Risk Management, Business, Finance, or related field; OR 4 years of relevant education and/or experience
• 8 years of risk management, regulatory or operations experience in a relevant functional area to include banking, insurance, financial services, audit, project management, public accounting or other related operational area; OR advanced degree/designation in Risk Management, Business, Finance, or other discipline relevant to risk management and 6 years of work experience in a discipline relevant to risk management; OR PhD in Risk Management, Business, Finance, or other discipline relevant to risk management and 4 years of work experience in a discipline relevant to risk management
• 3 years of direct team lead or management experience
• Advanced risk management experience in a complex institution and/or highly matrixed environment related to banking, insurance and/or financial services
• Demonstrated experience in conflict resolution management and ability to effectively challenge at all levels of management and influence business outcomes
• Experience leading and directing work with both internal and external partners in a highly collaborative environment
• Demonstrated critical thinking and knowledge of data analysis tools and techniques and decision‑making abilities, to include demonstrated ability to effectively make data‑driven decisions
• Advanced knowledge of Microsoft Office products including Excel and PowerPoint.