Lead Control Management Officer

In this role, you will:

• Lead complex initiatives designed to mitigate current and emerging risks with broad impact.
• Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area
• Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies
• Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area
• Develop and implement risk monitoring and risk reporting processes and controls
• Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies
• Lead Control Management project or virtual teams

Required Qualifications:

• 5+ years of Risk Management or Control Management experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.

Desired Qualifications:

• Universitydegree in Business or related discipline.
• One or more certifications like CRISC, CISA, CISM, CGEIT, and CISSP.

Job Expectations:

• Identifying and assessing risk for the targeted Technology Division
• Providing credible challenge on people, process and systems to ensure maximum business results and effective risk mitigation strategies
• Providing high quality risk management deliverables through a matrix staffing model to targeted Technology senior leaders and team members
• Partnering with Business Risk and Control team officers, senior specialists and applicable central technology controls teams to:
• Perform reviews of new products, solutions, projects and program requirements, evaluating control strength and associated risks
• Review mitigation/remediation plans and providing counsel on mitigation effectiveness and alternative mitigation approaches
• Manage issue, policy exception and risk acceptance portfolio to ensure appropriate and timely risk mitigation inclusive of third- and fourth-party risk
• Perform gap analysis for policies and/or regulatory requirements
• Conduct root cause analysis on technology incidents to identify weak or non-existing controls and create effective mitigation plans
• Produce effective and actionable management reporting for CIO and ultimately sub-CIO level