Tech Risk & Controls Director - Information Technology Asset Management; ITAM

Tech Risk & Controls Director

Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm's tech risk strategy and enhance industry compliance.

As a Tech Risk & Controls Director within the Consumer & Community Banking Technology - Tech & Risk Controls you will lead the strategic development and implementation of technology risk management and enterprise-grade technology asset governance across the Consumer Banking Technology estate. You will be accountable for the end-to-end ITAM strategy, operating model, and execution—providing explicit oversight of Tech Operations, Tech Maintenance, and Tech Lifecycle Management.

This role ensures technology assets (hardware, software, and in-scope virtual/cloud resources) are inventoried, compliant, resilient, cost-optimized, and lifecycle-managed to support consumer banking outcomes cess requires disciplined controls, strong cross-functional leadership, and measurable improvements in availability, risk posture, audit readiness, and total cost of ownership (TCO).

• Own ITAM strategy and operating model for CCB Technology, ensuring a complete, accurate, and auditable inventory of in-scope assets and relationships (configuration, ownership, location, usage, entitlement), inclusive of Tech Ops, Tech Maintenance, and Tech Lifecycle Management
• Establish and drive adoption of enterprise standards for asset onboarding, normalization, tagging, reconciliation, and lifecycle state management across engineering and operations teams
• Lead software licensing and entitlement management including consumption analytics, compliance/audit readiness, and remediation of gaps through durable process and tooling improvements
• Design, implement, and execute an ITAM controls framework that is audit-ready, including control objectives, evidence standards, governance cadence, issue management, and remediation discipline
• Develop and implement technology risk management strategies, policies, and processes to identify, assess, mitigate, and monitor risks aligned to firm standards, regulatory requirements, and industry best practices
• Identify and escalate emerging and upstream technology risks using firm management framework tools (e.g., risk event management, reporting, action plan tracking) and provide expert counsel to stakeholders on obligations and acceptable outcomes
• Partner closely with Cybersecurity, Architecture, Engineering, Finance, Procurement, Vendor Management, Risk, Compliance, and Audit to ensure alignment to firm standards and regulatory expectations
• Own executive-ready governance, reporting, metrics, and insights on control effectiveness, asset data quality, compliance posture, availability/stability, and economic outcomes

• Senior leadership experience in technology asset management and technology operations within large-scale, regulated environments
• Deep knowledge of ITAM practices, software licensing/entitlement management, lifecycle governance, and operational service management disciplines
• Proven experience building controls, operating cadences, and audit-ready evidence with strong issue remediation discipline
• Demonstrated ability to deliver measurable outcomes across availability/stability, cost optimization (TCO), risk reduction, and operational efficiency
• Strong executive communication skills; ability to lead and influence cross-functional initiatives across engineering, infrastructure, and enterprise control partners
• 7+ years of experience (or equivalent expertise) in technology risk management, information security, or related fields, with a focus on risk identification, assessment, and mitigation
• Demonstrated expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry

• Proven ability to lead large teams, manage cross-functional projects, and translate technology insights into business-aligned strategy and decisions
• Advanced knowledge in data security, risk assessment & reporting, and control evaluation/design/governance, with a track record of…