Risk Manager, Identity & Access Management (FS)

About the position

As a Risk Manager in the Financial Services Business Risk Office, you will provide professional risk judgment that enables business partners to tackle major company challenges. In this role, not only will you lean into your analytical and problem solving skills by developing and deploying innovative solutions to mitigate risks to the Company, but you will also grow your strategic and influencing skills as you create and implement risk strategies that enable the Company to win in the market. You will create order and sense out of complexity and uncertainty and enable confident, data-inspired decision making. As a Manager for Identity & Access Management, you will have a foundational understanding of all areas of identity & access management for business and technology user access and beyond. This role will serve as our subject matter expert for native identity & access management solutions. This position will provide risk analysis, design and implementation of roadmap, and implementation plans with security, technology, and architecture best practice viewpoints. This role will provide oversight, scheduling, and management of the execution of IAM controls. This role will also collaborate closely with associates in first line Cyber, Technology, as well as other risk management offices to perform and support risk, security, and compliance assessments.

Responsibilities

• Develop a deep understanding of business strategies, products, services, and risk profile.
• Identify and assess the impact of the changing regulatory environment on business objectives and risk appetite.
• Analyze data to proactively identify risks and trends and provide insights that support internal customers in decision-making.
• Provide guidance and advice to business partners on implementing risk policies and programs.
• Drive collaboration between the risk, compliance, legal, and other business support functions.
• Ensure independent escalation of risk management gaps, issues, and concerns to executive management and when appropriate, the Board of Directors, including emerging risks and regulatory focus areas.
• Identify opportunities to improve risk management practices and develop solutions to perfect risk management, eliminate waste, and deliver an exceptional customer experience.
• Drive containment and remediation of process breakdowns in conjunction with compliance, legal and business process teams.
• Play a lead role in identifying areas of cyber risk to provide oversight, analysis, effective challenge, and risk-informed recommendations for enhancement.
• Provide technical assessments of cybersecurity and controls design and effectiveness.
• Draft assessments for senior management and other stakeholders, as needed.
• Stay current on emerging cyber threats and potential implications to the firm.
• Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.
• Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.

Requirements

• High School Diploma, GED or equivalent certification.
• At least 4 years of experience in project, process, program, or risk management.
• At least 4 years of experience managing the execution of IAM (Identity Access Management) controls.
• At least 2 years of experience with people management.

Nice-to-haves

• Bachelor’s, Master’s Degree in Computer Science or Engineering.
• 6+ years of experience managing the execution of IAM (Identity Access Management) controls.
• 6+ years of experience in project, process, program, or risk management.
• 4+ years of experience with people management.
• 1+ years of experience in a cyber or IT risk or audit role.
• CIAM certification, or other similar certifications such as CISA or CISSP.
• 1+ years of experience with application architecture, operations, security or deployments.
• 1+ years of experience developing presentations for senior level audiences.
• 1+ years experience with identifying and communicating key risks related to control design and process improvements.
• 1+ years experience with risk analysis and reports that describe the risk implications to executives.
• 1+ years of experience working in financial services or other highly-regulated sectors.
• 1+ experience with security best practices.

Benefits

• Comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being.
• Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI).