Director of Emerging Technology Risk

Director, Emerging Technology Risk

The Director of Emerging Technology Risk within the Technology and Information Risk Management organization at Santander US and Santander Bank NA is responsible for ongoing oversight, assessment, management, and reporting of technology and cybersecurity risks associated with emerging technologies such as Cloud, AI, IoT, Blockchain, and Digital Assets across all operating entities.

• Establish themselves as the second line of defense subject matter expert for key stakeholders in the management of emerging technology risks across all operating entities
• Prepare information to enable governance committees and working groups in the management oversight of emerging technology risks
• Participate in relevant governance committees and working groups as a delegate of the Head of Technology
• Initiate timely escalations to the Head of Technology and to the leadership team
• Identify and assess technology and cybersecurity risks associated with emerging technologies and counsel business units, CISO, and IT GRC stakeholders on risk management issues to ensure awareness and accountability for emerging technology risks
• Develop and implement a technical risk management governance framework to enable the strategic business direction of the organization
• Ensure the updating of existing policies and frameworks or develop new ones that steer the safe and sound adoption of emerging technologies across the organization
• Participate in the independent and ongoing risk oversight of key technology components of the firm’s digital transformation initiatives; coordinate oversight of key emerging technology risks
• Work across the lines of defense to recommend strategies that effectively treat risks within the risk appetite
• Monitor emerging technology trends and evaluate potential impacts to business strategy; provide documented analytical insights of the risk horizon while ensuring a sound operational and compliance control environment
• Participate in evaluation of new products, business changes, and projects and assess related emerging technology risks and impact to the technology risk profile
• Participate in the evaluation and management of risks related to third‑party suppliers involved in technology projects related to the deployment of emerging technology or where emerging technologies introduced by third parties are a key component of the business activities
• Advise on remediation of regulatory findings, correction of any inconsistencies, and monitors resolution
• Manage, oversee, and contribute to targeted risk reviews designed to evaluate emerging technology risks and their effective and sustainable mitigation
• Perform review and challenge of first line of defense risk management processes, data, and outcomes, and communicate risk opinions at various levels of management
• Analyze risk data from various sources to identify and measure levels of risk, concentration, trends, and patterns
• Support a process for constructive engagement across the lines of defense regarding differences or conflicts in risk appetite, risk metric determination, evaluation, issue severity, or other areas of dispute
• Manage delivery timelines and develop materials to ensure second line of defense independent opinion is appropriately represented during committee meetings, external exams, and internal audits
• Ensure all activities and deliverables achieve their timeliness, quality, and accuracy service levels
• Collaborate with other second line of defense functions such as Operational Risk, Model Risk, Compliance, etc. on common priorities and strategic initiatives
• Provide second line of defense leadership and subject matter expertise during the response to major technology or cyber incidents and coordinate second line of defense engagement and response of incident/crisis managers
• Recruit, develop, and manage talent to create within the organization a culture of leadership, performance, and accountability

• Bachelor's Degree in a technical discipline or equivalent work experience (Computer Science, Information Technology, Information Systems, Information Security)
• Master's Degree in related technical…