About this role
Senior Manager, Technology Risk and Control Self-Assessment
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.
Contributes to the overall success of the Technology, Risk and Control Self-Assessment program globally ensuring specific individual goals, plans, and initiatives are executed/delivered in support of the team’s business strategies and objectives. Ensures all activities are conducted in compliance with governing regulations, internal policies and procedures.
The Senior Manager of Technology Risk & Control Assessments will play a critical role in the hands-on execution of the Risk and Control Self-Assessment program across Technology. Reporting to the Director of Technology RCSAs, this role will lead the operational delivery of RCSAs, working closely with team members and First Line partners to ensure timely, accurate, and high-quality assessments. This role partners with technology leadership, risk management teams, and control owners to identify, assess, and mitigate technology risks while ensuring alignment with the bank’s enterprise risk management framework, regulatory expectations, and industry standards. The Senior Manager will lead deep-dive technology risk assessments, evaluate the effectiveness of controls, challenge risk assessments from the first line of defense, and deliver risk insights to senior management and risk governance committees. The ideal candidate is detail-oriented, collaborative, and skilled at managing multiple priorities in a fast-paced environment
Is this role right for you? In this role, you will:
- Lead end to end execution of Technology RCSA activities across critical systems, platforms, and critical business services.
- Own facilitation of risk identification, inherent risk assessment, control mapping, and residual risk determination for technology processes and services.
- Perform deep dive assessments to evaluate control design and operating effectiveness across key technology domains (e.g., access management, change management, resiliency, third party risk).
- Identify control gaps, emerging ris