Risk Governance Modern Technologies

Risk Governance Manager
- Modern Technologies

Make Next Happen Now. For more than 30 years, The Bank has helped innovative companies and their investors move bold ideas forward, fast. The Bank provides targeted financial services and expertise through its offices in innovation centers across the world. With commercial, international and private banking services, The Bank helps address the unique needs of innovators.

The Risk Governance Manager
- Modern Technologies will play a key role as a change agent in the technology transformation journey of the Bank. This position will be responsible for establishing the governance frameworks and executing processes that ensure compliance of the Bank's major technology platforms with existing and evolving policies, standards and risk profile.

This includes developing and operationalization operating guardrails and devising ways to accelerate and automate compliance as well as establishing relationships with technology and business leadership. In this role you will facilitate and interact with a cross-functional team of multiple stakeholders across the bank for ensuring continuous governance of enterprise Cloud, Dev Sec Ops  and API platforms.

Qualifications

• Execute the governance strategies for enterprise technology platforms
• Communicate platform governance strategies and plans and needs to external stakeholders
• Engage with security and risk and compliance stakeholders to develop frameworks for continuous compliance and governance of enterprise technology platforms across people process and technology
• Partner with product managers of enterprise platforms to incorporate governance needs into platform delivery roadmaps
• Engage with teams leveraging the platforms to ensure adherence to the core principles and mandatory controls within the framework, and provide coaching for the same
• Develop granular metrics and reporting to educate leadership and stakeholders on the levels of adherence across platforms
• Develop mechanisms to maximize automation of the compliance requirements and the reporting against the same
• Identify opportunities and build a plan/journey based on realistic outcomes for automation of cloud governance services then document, design and implement to accomplish this automation
• Support the adaptation and inclusion of the Cloud Governance Framework into the Cloud build and migration journey
• Proactively identify optimizations, improvements and recurring inefficiencies that may hamper process adoption and adherence, and provide analysis and recommendations to the platform or delivery teams as appropriate
• Evaluating Cloud services using industry standard risk and control frameworks
  - Experience using cost tooling (like Cloud Health) to analyze and categorize spend across a large organization
• Manage stakeholders and their expectations
• Effectively communicate ideas and information with peers, management, and customers
  - Serve as a Change Agent and contribute to a culture of continuous compliance
• Build trusting and collaborative relationships with other technology teams to identify dependencies and needs (dev teams, dev/ops, cloud engineering, operations, infosec, architects, account owners/admins, and finance)

Skills

• 10+ years of overall industry experience, specifically around governance, risk and compliance of technology platforms
• 4+ years working experience with cloud platforms (AWS) and Dev Ops
• Passion for achieving excellence in delivery, solving complex problems, and taking ownership
• Knowledge of, and experience with, financial services regulatory frameworks such as PCI, SOX, FFIEC, CIS
  20, GDPR, GLBA, CCPA
• Experience with enterprise IT management frameworks (e.g. COBIT, ITIL)
• Proficient in AWS/Azure/GCP security architecture best practices
• Knowledge of IAM restrictive policies in shared accounts preferred
• Stays in touch with latest trends and can clearly communicate value add benefits of changes
• Excellent technical, analytical, problem solving, multitasking, and time management skills with consistent attention to detail
• Experience with containerization technologies (i.e. Docker, Kubernetes, etc...)
• Experience with serverless technologies (i.e. Lambda, Functions, etc...)
• Use of orchestration tools such as Terraform, Ansible or Cloud Formation
• Experience migrating application from on-premises to public cloud.
• Experience with Log Management tools (i.e. Elastic Stack, Splunk, etc.)
• Ability to effectively learn, communicate and use new processes, concepts, tools, and methodology to support the needs of the business
• Strong interpersonal skills, with the ability to work across functional lines and at many levels
• Excellent presentation (written and verbal) communication skills. Ability to effectively communicate technical issues and solutions to all levels of business
• Ability to effectively share technical information and train and mentor less experienced or knowledgeable team members