Technology Governance and Operations Control Specialist

State of Arkansas - Lincoln, AR

Full-time - Mid Level

Lincoln, AR

Executive, Legislative, and Other General Government Support

About the position

The Technology Governance and Operations Control Specialist at Arvest is responsible for ensuring regulatory compliance of technical and business operations in alignment with industry best practices and frameworks such as NIST, COBIT, ITIL, PCI-DSS, and banking regulations. This role involves drafting policies, conducting audits, managing issue remediation, and improving business processes while collaborating with various stakeholders.

Responsibilities

• Identify, assess, and mitigate business unit and corporate risk, evaluate controls, and recommend changes to reduce risk.
• Foster strong partnerships with internal and external audit or assessment partners, facilitating audit activities and ensuring effective coordination and communication.
• Measure compliance with implementation and alignment to industry frameworks, conducting gap analysis, risk assessment, and monitoring remediation from planning to resolution.
• Monitor issue remediation and perform first-line reviews of expected deliverable information to ensure they deliver the intended outcomes.
• Partner with SLoD to provide input/review frameworks, policies, and standards, and facilitate Business Line awareness of risk frameworks, policies, and standards.
• Assess gaps and emerging threats and perform pre-2LoD and/or 3LoD review readiness.
• Support the technology process in identifying issues, assessing severity, and developing and tracking remediation action plans.
• Review and validate the accuracy of information to be documented in the GRC and enterprise governance repository.
• Produce periodic reporting on issues management, governance, risk, and control issues.
• Maintain centralized document management of all audit and governance documentation artifacts.
• Review technical (IT) policies and transformation by testing business processes to identify efficiencies, key objectives, and the optimal level of risks.
• Investigate and manage key interdependencies that impact risk across technology and operations while developing and monitoring strategies, goals, and processes that assess the level of risk to ensure maximum audit and compliance.
• Monitor and report on compliance with established IT governance frameworks.
• Communicate and collaborate effectively with stakeholders to regularly plan, schedule, and perform audits and assessments.
• Stay current with emerging trends, technologies, and regulatory changes impacting IT governance and operations.
• Challenge the status quo and find opportunities to improve and streamline existing processes.
• Undertake ad-hoc projects as needed.
• Understand and comply with bank policy, laws, regulations, and the bank's BSA/AML Program.

Requirements

• Experience with regulatory compliance frameworks such as NIST, COBIT, ITIL, and PCI-DSS.
• Strong understanding of banking regulations and operational risk management.
• Proven ability to conduct audits and assessments effectively.
• Excellent communication and collaboration skills with stakeholders.
• Ability to analyze and interpret complex data and reports.
• Experience in drafting policies, standards, and procedures.

Nice-to-haves

• Knowledge of emerging trends and technologies in IT governance.
• Experience in risk assessment and management frameworks.
• Familiarity with GRC (Governance, Risk, and Compliance) tools.

Benefits

• Health insurance
• 401k retirement plan
• Paid holidays
• Professional development opportunities