Risk Manager - Engineering - CRO

About This Role

This role is for a highly experienced Risk professional to join the Chief Risk Office (CRO) Department. You will be responsible for monitoring and analyzing risks within the Engineering areas, providing risk management services, and collaborating with various functions to deliver centralized risk frameworks, processes, tools, training, and advisory services.

Responsibilities

• Monitor and analyze risks within the Engineering areas, applying good judgment when evaluating both the risk and controls framework
• Work closely with Engineering stakeholders to conduct an in-depth analysis of key processes, which may include documentation of process flows, policy and procedure review, and stakeholder interviews
• Operate as an educator and partner by facilitating First Line of Defense (FLOD) risk execution and partnering on Risk Control Self-Assessment (RCSA) training efforts
• Successfully challenge FLOD on the identification and mitigation of risks, and the adequacy of controls
• Socialize gaps resulting from risk assessments with relevant colleagues and assist with remediation of gaps
• Support the design and build of an enhanced RCSA process including enhanced data collection and reporting
• Monitor and analyze risk data and metrics to identify trends, patterns, and areas for improvement
• Collaborate with cross-functional teams to implement risk mitigation measures
• Provide subject matter expertise and knowledge of relevant risk trends
• Seek to ensure the integrity, completeness, accuracy, and timeliness of risk data, in addition to driving risk programs
• Stay informed on risk industry and educational/development opportunities
• Use Governance Risk and Compliance (GRC) tools to evidence risk management, monitoring, measurement, and reporting within the division
• Follow up on gaps, Incidents and Remediation plans that require actions for respective business units

Requirements

• 6-7 years experience in risk management with a focus in technology risk management
• Bachelor’s Degree or higher in Information Systems, Computer Science or related discipline
• Experience in risk management, audit or compliance related to technology risk or cyber security
• Good understanding of all aspects of technology infrastructure, application operations and control
• Great collaboration skills to guide organizational change and partner with both senior management and staff
• Proven intellectual curiosity through professional training, advanced degree or professional impact
• Understanding of industry best practices like NIST, CSF or CIS and other risk management frameworks, such as COSO
• Prior experience in either a 1st or 2nd line of defense capacity