Director, Tech Risk Management; Hybrid

Overview

Get AI-powered advice on this job and more exclusive features.

Job Classification:
Technology - Risk & Governance

At Prudential, we believe talent is key to achieving our vision. When you join Prudential, you’ll unlock a motivating and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions!

Prudential’s Operational Risk Management (ORM) team supports the execution of Prudential’s strategy by ensuring risks are well understood and managed. Joining ORM provides an opportunity to see across Prudential and work with senior management, Audit, Law, Compliance, and other Risk Management teams to help drive business outcomes.

We are seeking a Director of ORM, Technology Risk Partner who will provide expertise, independent oversight and monitoring, and effective challenge supporting the Global Technology and Operations organization with a focus on the Chief Technology Office. This is done by promoting effective execution of the company’s ORM framework, providing cross-functional leadership, and through independent analysis and reporting.

This position requires strong critical thinking, good judgment, and the ability to synthesize large amounts of information into intelligence. It also requires strong communication, resourcefulness, and the ability to influence others. A strong candidate will be a strategic thinker who can also work tactically and solve challenging problems with others.

The ideal candidate will be a seasoned risk manager with expertise in information technology, particularly within financial services. This Director-level role requires a proven track record of leading comprehensive risk management initiatives at a strategic level.

The current employee work arrangement for this position is Hybrid and requires on-site presence on a recurring basis as determined by the business. Your manager will provide additional details on the specific number of days on-site.

• Risk Identification and Assessment:
  Identify and assess technology-related risks including Identity and Access Management, Vulnerability Management, Resilience, etc., to ensure the organization’s risk profile is accurately captured.
• Risk Mitigation and Control Implementation:
  Develop and implement risk mitigation strategies and controls to address identified technology risks, ensuring alignment with risk appetite and tolerance.
• Regulatory Compliance:
  Work with control partners and the business to ensure compliance with regulatory requirements and industry standards (e.g., NIST, ISO 27001, COBIT); stay current on changes and advise the organization accordingly.
• Risk and Control Self-Assessments (RCSAs):
  Conduct and review RCSAs to evaluate control effectiveness and identify improvement areas.
• Issue Management and Response:
  Oversee management and remediation of technology-related issues, ensuring timely resolution and clear communication with stakeholders.
• Risk Reporting and Communication:
  Prepare and present risk reports to senior management and governance forums, clearly communicating risk posture and mitigation plans.
• Collaboration and Stakeholder Engagement:
  Collaborate with cross-functional teams to ensure alignment on risk management strategies and initiatives.
• Continuous Improvement:
  Continuously monitor and improve the technology risk management framework, incorporating best practices and lessons learned, and monitor emerging technology risks to prepare Prudential for the future.

• Extensive Experience in Technology
  
  Risk Management:
  
  At least 10 years of progressive experience in operational risk management, internal audit, or compliance within financial services focused on information technology.
• In-depth Knowledge of IT Risk Frameworks and Regulations:
  Familiarity with regulatory requirements and risk management frameworks such as NIST, ISO 27001, and DORA.
• Proven Leadership and Team Collaboration Skills:
  Ability to lead and collaborate with cross-functional teams, providing guidance on technology risk management initiatives.
• Strong Analytical and Problem-Solving Abilities:
  Expertise in analyzing risk data,…