Director, Risk Management & Information Security

Stellantis Financial Services (SFS) is the new captive finance company for one of the world's leading automakers and a mobility provider with iconic brands including Abarth, Alfa Romeo, Chrysler, Citroën, Dodge, DS Automobiles, Fiat, Jeep, Lancia, Maserati, Opel, Peugeot, Ram, Vauxhall, Free2move and Leasys.

Our exciting growth provides opportunities to advance your career as we successfully lead products and services from a small to midsize company in just a few years. Join our world class team and culture and contribute to our core mission which is enhancing our customer's experience.

The Director of Risk Management and Information Security supports the Chief Risk Officer in building, maintaining, and continuously enhancing the bank's Enterprise Risk Management (ERM) framework. This role serves as a key advisor and subject matter expert across risk disciplines including credit risk, operational risk, compliance risk, liquidity risk, market risk, and strategic risk, leading risk identification, assessment, monitoring, and reporting activities across the organization to help ensure risks are managed within the bank's risk appetite and in conformance with applicable regulatory requirements.

Additionally, this role will serve as the bank's designated Information Security Officer, responsible for developing, implementing, and overseeing the bank's information security program in accordance with GLBA Safeguards requirements and applicable regulatory guidance. The role works closely with first-line business units, Finance, Compliance, Legal, Internal Audit, and senior leadership to foster a strong risk culture and provide actionable risk intelligence that supports sound decision-making across the bank, with strong potential for growth as the risk function expands.

• Support the Chief Risk Officer (CRO) in maintaining and evolving the bank's Enterprise Risk Management (ERM) framework, including risk governance, risk appetite, policies, taxonomy, and overall Risk function continuity.
• Serve as a strategic partner to the CRO, representing the Risk function at management and Board-level governance committees while acting as a risk subject matter expert who provides effective challenge and trusted advisory support to first-line business partners in accordance with the bank's three-lines-of-defense model.
• Develop, maintain, and present comprehensive risk reporting to senior management, the Board of Directors, and applicable Board committees (e.g., Risk Committee, Audit Committee), including key risk indicators (KRIs), risk appetite metrics, and emerging and external risk assessments informed by regulatory developments, industry trends, peer bank benchmarking, and macroeconomic conditions.
• Lead and coordinate the bank's risk and control self-assessment (RCSA) process across all business lines, including consumer lending, small business lending, deposits, and operations, ensuring risks are identified, rated, and mapped to controls.
• Oversee second-line credit risk management activities, including review of credit policy exceptions, portfolio concentration analysis, loan-level risk monitoring, and coordination with the credit and underwriting teams on risk-related matters for consumer and small business portfolios.
• Manage the bank's second-line operational risk program, including incident and loss event tracking, root cause analysis, operational risk appetite monitoring, and coordination on business continuity and third-party risk management activities.
• Serve as the bank's designated Information Security Officer (ISO), responsible for the enterprise information security program and second-line cybersecurity risk oversight, including governance,…