Sr. Director, Technology Risk Management

Location: Boston, Miami, Florham Park, Madison Ave Corp, Dallas

Time Type: Full time

Posted: 2 Days Ago

Job Requisition ID: Req

USA Job Family Description: Monitors activities to minimize the company's exposure to technology risks. Activities may include independent 2nd line of defense assurance over technical risk analysis, risk identification and remediation. The incumbent shall ensure that the oversight over technology risk management activities is adequate to minimize compliance and regulatory risk by resolving issues and ensuring adherence to industry good practice frameworks, company and legal standards.

USA Job Function Description:

The Sr. Director, Technology Risk at Santander US and Santander Bank NA is responsible for all independent risk management and assurance activities over the assigned business area's technology footprint as part of the second line of defense Technology and Information Risk organization.

The incumbent develops and maintains an effective Technology Risk Management program that enables the assigned business area to comprehensively identify, assess, mitigate, manage, monitor, and report technology risk, including performing technical risk reviews of identified domains.

This role requires collaboration across CISO, Data Office, IT, Operational Risk, Internal Audit, and other relevant functional stakeholders in the management of existing and emerging technology risks. An excellent understanding of the evolving regulatory landscape in the US and EU is vital for success in this role.

Key Responsibilities:

• Establish themselves as the second line of defense subject matter expert for key stakeholders in the management of technology risks across all operating entities.
• Prepare information to enable governance committees/working groups in the management oversight of technology risks.
• Participate in relevant governance committees and working groups as a delegate of the Head of Technology.
• Initiate timely escalations to the Head of Technology Risk and to the leadership team.
• Identify and assess technology risks and counsel business units managers, IT GRC, CDO and/or CISO stakeholders on risk management issues.
• Oversee ongoing oversight of the firm's technology and information risk footprint through ongoing monitoring, formal review and challenge activities.
• Develop and implement a technical risk management governance framework to enable the strategic business direction of the organization.
• Ensure the updating of existing policies and frameworks or develop new ones that steer the safe and sound adoption of technologies across the organization.
• Participate in the independent and ongoing risk oversight of key technology components of the firm's digital transformation initiatives.
• Implement and sustain independent risk oversight coverage of the operating platform and vendor software development activities.
• Work across the lines of defense to recommend strategies that effectively treat risks within the risk appetite.
• Monitor external trends and evaluate potential impacts to business strategy.
• Participate in evaluation of new products/business changes/projects and assess related information risks.
• Advise on remediation of regulatory findings and monitor resolution.
• Manage, oversee and contribute to targeted risk reviews designed to evaluate technology risks.
• Perform review and challenge of first line of defense risk management processes and communicate risk opinions.
• Analyze risk data from various sources to identify and measure levels of risk, concentration, trends, and patterns.
• Support process for constructive engagement across the Lines of Defense regarding differences or conflicts in risk appetite.
• Manage delivery timelines and develop materials for committee meetings and audits.
• Ensure all activities and deliverables achieve their timeliness, quality, and accuracy service levels.
• Collaborate with other second line of defense functions on common priorities and strategic initiatives.
• Provides second line of defense leadership during response to major technology or cyber incidents.
• Recruits, develops, and manages talent to create a culture of leadership, performance, and accountability.

Qualifications:

Education:

• Bachelor's Degree in a technical discipline or equivalent work experience.
• Professional Certifications.

Preferred:

• Master's Degree in related technical disciplines.
• Professional Certifications in Cloud Infrastructure Management (AWS, Azure).

Work Experience:

• 15+ years overall professional experience in IT risk management roles.
• Experience in managing Technology risks across multiple technical domains.
• Experience in IT risk consulting in the financial services sector is highly preferred.
• Experience within a highly regulated environment is necessary.
• Experience leading high performance teams.

Skills and Abilities:

• Strong understanding of technology infrastructure and enterprise resilience.
• Experience with developing and implementing Information Risk Management Programs.
• Demonstrated leadership skills and ability to coordinate oversight activities.
• Knowledge of current and evolving regulatory requirements.

Technical Skills:

• Technology Resilience
• Zero trust IT architectures
• IT Asset Management
• Software development lifecycle
• Cloud infrastructure, service, and deployment models

Competencies and Abilities:

• Demonstrated expertise in technology risk management.
• Ability to engage effectively with both senior management and operational teams.
• Ability to build relationships and influence across diverse stakeholders.

Diversity & EEO Statements: At Santander, we value and respect differences in our workforce and strive to increase the diversity of our teams. We actively encourage everyone to apply.

Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

Base Pay Range:

Minimum: $189,000.00 USD

Maximum: $300,000.00 USD