Investments and Capital Market - Risk & Governance Manager
Apply on
Role : Investments and Capital Market - Risk & Governance Manager Location: Maclean, VA Duration: Fulltime MOI : Telephonic & Skype
Primary Skills: RISK MANAGEMENT, Finance, Information Security
We need Candidates with a Minimum of 12 Years of Experience. This is an Onsite/Hybrid model and needs candidates from the EST and CST Time zones only.
Position Overview: Our Impact:
I&CM Risk & Governance is the first line of the defense risk governance team. We act as trusted advisors for our business partners as we proactively assist in assessing and identifying potential risks that may impede our division from meeting its business objectives.
Our team is responsible for technology risk and governance activities and execution.
We work closely with partners within Information Risk, Business Technology Office, I&CM, and other divisions to continually mature the firm s risk program.
Your Impact:
As a Risk and Governance Manager, you will oversee technology-related processes and partner with business stakeholders and domain risk SMEs to identify and mitigate risks. Your work will help us improve our risk management process and strengthen our control environment. This role will provide opportunities to broaden your technology and risk knowledge and strengthen your leadership skills. Although this role is not currently a people manager, you will partner with the director to coach and develop the team.
Your day-to-day responsibilities include:
Identify and assess technology process risks.
Develop and document adequate controls, including supporting establishment, maintenance and validations of SOX, non-SOX technical, and operational controls across I&CM technology activities.
Assess gaps and emerging threats and perform pre-2LOD and/or 3LOD review readiness.
Prepare, conduct, and document quarterly Risk Control Self-Assessments for technology processes.
Provide support to the business process during 2LOD oversight activities, Internal Audit exams and FHFA exams.
Support the technology process in identifying an issue, assessing severity, developing, and tracking remediation action plans.
Proactively stay abreast of business/market changes/trends that may impact technology and associated risks.
Discuss and resolve potential risks with relevant stakeholders.
Provide risk and control input for I&CM's new business and governance initiatives.
Conduct root cause and impact analysis of operational risk events. Identify remediation activities and produce concise write-ups for Senior Management.
Generate risk and compliance-related materials for I&CM, IT, ERM, IA and FHFA, including periodic updates and time-sensitive requests.
Review and validate the accuracy of the information documented in the risk database and enterprise governance repository.
Develop technical risk procedures, job aides and process flow for the division.
Produce periodic reporting on risk indicators, and divisional technology risk and control issues.
Challenge status quo.
Find opportunities to improve and streamline existing processes.
Undertake ad-hoc projects as needed.
Qualifications: 5- 10 years of risk management, governance, audit, emerging threats, program governance, artificial intelligence, and/or data compliance in technology processes (ideal candidate possesses experience in several of these areas). Proven ability to investigate, assess risks, and partner with technical and non-technical business owners to determine root cause and remediation (including potential upstream/downstream impacts). Experience supporting financial and/or product development services desired, but comparable industries acceptable with a willingness to learn. Degree in Finance, Risk Management, Information Security, or a technology-related field; or equivalent work experience preferred. Experience implementing, formulating control language, or assessing Sarbanes-Oxley requirements, Risk and Control Self-Assessments (RCSA) and/or proactively identifying potential technical and emerging risks and process improvements. Experience defining, documenting, and communicating technical and operational governance. Ability to track and report on achievement of plans/projects. CIA, CISA, CISSP, PMP, CISM, CRISC or other related professional certification preferred (or working towards a certification).
Keys to Success in this Role:
Proactive with the ability to think holistically and creatively.
Produces concise, detailed, and insightful documents/write-ups with the ability to communicate at different levels.
Multi-tasker, self-starter, agile, and standout colleague.
Relationship builder, influencer, and maintain a positive attitude.
Passion for continuous learning, including Capital Markets, emerging technologies, and program process improvement opportunities.
Staying current on regulations, industry standards, policies, and regulations that may affect the industry and be comfortable with transition and change.
