Sr Risk and Compliance Manager

Job Title: Senior Risk Compliance Manager, Security and Privacy

Job Summary:

The Senior Risk and Compliance Manager analyzes and administers internal risk and compliance programs to ensure that product capabilities, policies, and procedures related to Security and Privacy are well defined and implemented. They work closely with teams across functional areas and geographies to ensure that the ACI products and operations comply with regulatory, network, and enterprise policies and standards. The role involves creating formal procedures to understand compliance obligations (e.g. PCI, GLBA, DORA, ISO 20022, SWIFT, etc.)

necessary to define and drive product compliance and enable effective management of associated risk and compliance controls and requirements. The manager is responsible for the creation, testing, and documentation of regulatory, financial, operational, and computer system records for security and privacy integrity and completeness. They collaborate with management in all areas to define and refine the risk and compliance function as it relates to overall business activities.

Job Responsibilities:

• Provides leadership, support, and execution of ACI’s risk compliance programs in Information Security and in Consumer and Commercial Information Protection and related requirements (e.g. PCI, GLBA, DORA, ISO 20022, SWIFT, etc.).
• Supports the business unit’s alignment with risk compliance requirements and risk processes to ensure that systems, products, and practices comply with enterprise policies and standards, and applicable regulations.
• Provides subject matter expertise to stakeholders within the business units regarding compliance to information security and consumer and commercial information protection regulations for assigned products and operations.
• Understands and monitors the regulatory environment applicable to the business unit; assesses and communicates changes that may impact the business; translates regulatory guidance into practical and actionable requirements; provides regulatory change management oversight and execution/implementation of requirements; serves as a conduit for emerging regulations; advises on changes within operations and activities that may trigger additional existing compliance implications.
• Proactively identifies, assesses, mitigates, monitors, and manages risk within the business unit; identifies control gaps and drives remediation efforts to completion; elevates, tracks, and reports on risk issues; understands the business owns the risk and provides assistance and guidance where appropriate; drives remediation to completion and holds the business unit accountable for ownership.
• Manages multiple risk and compliance initiatives; communicates and escalates to leadership (both within the business unit and cross-functional) as appropriate.
• Collaborates with the organization’s vertical and horizontal functions to address risk and compliance issues; consults with business leaders and stakeholders on solutions based on good internal models and advice.
• Interprets/translates across the functional areas, including technology, product, and the centralized risk function.
• Describes risks in business terms such as exposure, financial risk, customer risk, compliance, and reputational risk.
• Recognizes that risk management and compliance are about preparation and prevention, as much as response and recovery.
• Influences the entire organization to create a more risk-aware culture within the organization.
• Partners and builds trust with key business partners; is a respected and sought-after resource.
• Is intellectually curious, learns the business; provides insight as well as information.
• Continually drives for excellence within their team(s), aligned business areas, and ACI as a whole.

In this role, this individual can look forward to:

• Providing leadership, support, and execution of ACI's risk management and compliance framework across ACI’s business segments.
• Supporting the prioritization of risk and compliance program efforts within the business.
• Providing thought leadership, risk-based guidance, and advisory support based on the business unit operations; recommending practical solutions…