About the position
Finastra is recruiting for an Enterprise Risk Management Senior Manager who will be responsible for all aspects of Risk Management, Regulatory Compliance, and Internal Audit for Finastra Business Units (BU). This important role will report directly to Finastra's VP of Enterprise Risk Management and will act as a strategic partner to Finastra businesses, providing them with expert advice on risk and compliance matters. This role will partner and collaborate with stakeholders across Finastra - including IT, Information Security, Enterprise Risk Management, Compliance, Audit as well as stakeholders within the Finastra Business units. This role will allow for accountability with complete oversight for risk identification and mitigation within the BU and will also develop and maintain key relationships with external regulatory bodies, including the Fed, the FDIC and the OCC. Finastra is a rapidly growing private equity owned company that has evolved through a combination of organic growth and acquisitions. This rapid growth demands and requires the accountability and coordination to ensure sound risk management practices are top of mind, strategic and focused on execution of a strong plan. The role holder will be expected to have a breadth of experience and expertise across Risk, Compliance and Audit capabilities.
Responsibilities
- Develop comprehensive Risk and Control Library strategy and plan
- Develop and implement a strategic, long-term risk management strategy and plan for the Business
- Identify, evaluate, and report on BU risks, practices and progress to senior leadership, governance committees and, as required, to external stakeholders
- Provide subject-matter expertise on risk management standards and best practices to meet Finastra's regulatory and compliance obligations
- Design and implement approaches, standards and processes designed to ensure that the BU's risk management program complies with applicable laws, regulations, and contractual requirements
- Work with senior leaders within the BU to assess and communicate acceptable levels of risk
- Act as a champion for risk and compliance and foster a risk-aware culture and proactive risk management practices and behaviors
- Interact and collaborate with Internal Audit, Compliance, Cybersecurity, IT and BU colleagues and other internal and external stakeholders, such as external auditors, clients and regulators, as required
- Monitor the industry and external environment for emerging risks and advise relevant stakeholders on appropriate courses of action
- Conduct risk assessments for compliance with policies, standards, key controls, regulatory requirements - including analyzing risks, evaluating controls and identifying issues
- Validate exceptions including quantifying risks, investigating root causes, and working with owners to establish action plans
- Provide ongoing monitoring, tracking, and reporting of issues and remediation activities to senior leadership and governance committees
Requirements
- At least 10 years' experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and/or IT Governance functions
- Proven experience in a financial institution / bank, fintech or a risk advisory firm providing advice to the financial services sector, or a financial services regulator
- Knowledge and experience with laws, regulations, guidelines, and frameworks within the financial services industry such as FFIEC, COSO, NIST, ISO 27001 and 27002, GLBA, SOX
- Regulatory savvy having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk management approach
- Experience in managing cybersecurity and IT risks, implementing strategies, and familiarity with current threat landscape
- Comfortable in working in a matrix organizational structure alongside functional colleagues and business stakeholders
- Excellent organization, presentation, project management, and written and oral communication skills to effectively communicate across a broad range of constituencies, including senior leadership
- Ability to engage and develop relationships with external stakeholder - including regulators, auditors and Finastra customers
- Self-driven with a passion for developing and driving risk practices that produce best-in-class and value-add results in dynamic, evolving and sometimes ambiguous circumstances
- Innovative thinker with the ability to look beyond past practices for the best path forward.
- Ability to build a deep understanding of Finastra's business imperatives and strong relationships across all functions
- Become a respected advisor who collaborates widely to develop risk strategies and influence risk-based decision-making to enable the achievement of long-term business strategy
Nice-to-haves
- Graduate degree preferred
- Professional certifications, such as a CISSP, CISM, CISA, CIA, CRISC
