Senior Lead, Technology Risk and Control

Tasks

• Manage and/or support the implementation of risk and control activities for the Financial Line of Business.
• Ensuring a standardized approach to risk and control testing by business unit.
• Preparing, distributing, and presenting reports, dashboards, and presentations to executives and stakeholders. This may require additional research and information gathering; it requires a working knowledge of the organization’s management principles.
• Coordinate, prepare, and deliver presentations for the Business Unit Management Team as part of the Technology Opportunity Management (TOM) program or other special projects that assess high-level risks, impacts, and opportunities for the business in collaboration with other risk and control groups. This includes compiling detailed requirements, assisting with the documentation of results, and collaborating with multiple teams within CHC, which involves gathering project objectives, budgeting, meeting deadlines, and maintaining positive leverage.
• Review of risk dashboards and other management reports, including workflows in collaboration with other risk and business units within CHC.
• Ensuring that risk and control activities are conducted in accordance with CHC's policies and procedures, as well as regulatory and industry-specific requirements.
• Tracking and documenting the progress of risk and control activities, including the completion of assessments, tests, and other deliverables.
• Conducting risk assessments and providing recommendations to improve risk and control practices.
• Conduct root-cause analyses and implement corrective actions for identified risk and control issues.
• Support for technology audits, including the preparation for and assistance with internal or external audit activities.
• Assistance in preparing documentation and working papers for external regulatory audits.
• Development and implementation of strategies to improve risk and control practices.
• Monitoring and escalation of risk and control issues, as well as corrective actions, if necessary.
• Providing detailed analyses and frameworks for performance across multiple business units.
• Data collection and classification, third-party risk, user access, model risk, and information risk.
• Definition of Information Technology and Risk Across the Entire Organization:
  • Design, review, and implementation of risk and control frameworks.
  • Providing detailed analyses and reviews of systems and processes.
• Conducting risk assessments and audits in all areas to ensure accurate data and analysis results.
• Collaborating with programs and controls, identifying risks, and ensuring accurate data and analysis results.
• Review with partners, management, and stakeholders, if necessary.
• Support from all departments, management, and stakeholders, as needed.
• Providing documentation and other materials, resources, etc., as needed on behalf of the business and the business partner.
• Performing additional tasks, conducting training sessions and/or quality control checks, documenting and/or coordinating and tracking meetings and deliveries.

Requirements

• 7–10 years of experience in enterprise technology risk management, analytics, self-service, and related fields.
• Bachelor's degree in technology, mathematics, or a related field.
• Proven experience with relational databases, SQL, and scripting.
• Relevant technology or security certifications (e.g., CISSP, CISM, CRISC, CISA), if any.