The Technology Chief Risk Office (CRO) provides support to our business partners to maintain an agile, well-controlled environment that can rapidly and reliably deliver services across the enterprise, i.e., “go fast safely.” This candidate will play an integral role in the transformation of technology process and controls directly related to Cloud and the Technology Transformation program. In this role, a candidate will drive early integration of risk considerations and efficiently and effectively deliver enabling capabilities across risk and compliance functions for the Cloud program. The ideal candidate for this role will have comprehensive experience in Risk Assessments, Cloud (AWS and/or Azure), and Control Development.

Specific role responsibilities will include:

• Design and implement controls to ensure sensitive data is not in unapproved environments.
• Partner with Information Security Services (ISS), Enterprise Architecture (EA) and other subject matter experts to evaluate application compliance and platform readiness for cloud migration.
• Support execution and identify enhancements for the application migration processes.
• Execute risk assessments to support implementation of control requirements.
• Identify gaps and drive solutions for processes and controls executed by the Technology Transformation program.
• Ensure effective identification, quantification, communication, and management of technology risk, including root cause analysis and resolution recommendations.
• Accountable for an effective partnership between the Technology Business Line, Audit Services and Second Line of Defense.

Basic Qualifications

• Bachelor's degree, or equivalent work experience
• 10+ years of applicable experience

Preferred Skills/Experience

• Experience deploying applications and controls into Cloud, preferably Azure and AWS
• Ability to execute detailed, comprehensive risk assessments of processes and controls
• Experience delivering controls and/or applications to the Cloud (AWS/Azure)
• Proven track record in designing and implementing controls
• Strong technical background with an ability to communicate risks in both technical and non-technical forums.
• Ability to identify threats, prioritize risks, and document for leadership decisioning.
• Proven relationship management skills.
• Excellent presentation, interpersonal, written, and verbal communication skills.
• Ability to thrive in ambiguous and matrixed environment.
• Adaptable to changing priorities and competing timelines.
• Demonstrate analytical and problem-solving skills.
• Portrays exceptional facilitation, negotiation, conflict resolution skills.
• Applicable professional certifications.