The Director of IT Governance Risk and Controls is responsible for directing, managing, and enforcing IT policies, standards and procedures. This role is responsible for aligning IT initiatives with the risk appetite of the Valley National Bank Board of Directors and plays a critical role in the management of IT risk and compliance. The person filling this role is responsible for evaluating the effectiveness of IT Operational controls, recommending remediation and providing control design/redesign guidance, working with technology partners.
40
Responsibilities include, but are not limited to:
- Function as a single point of contact for all aspects of enterprise IT policy governance, IT internal and external audits and engagements with regulators.
- Proactively identify potential risks within business operations, conduct risk assessments to understand the severity and likelihood of those risks, and document findings.
- Design and implement internal controls to mitigate identified risks, monitor the effectiveness of those controls, and take corrective actions when necessary.
- Promote adherence to relevant regulations, internal policies, and procedures within IT. Includes preparation for regulatory exams and facing off with regulators along with appropriate subject matter experts on staff.
- Collaborate with different teams within IT to understand their risk profile, provide guidance on risk management practices, and facilitate open communication about risks.
- Contribute to the development and maintenance of relevant risk management policies and procedures.
- Identify and escalate critical risks to appropriate levels of management when necessary.
- Custodian of Information Technology (IT) policy and process governance frameworks.
- Build, manage and mature best in class and comprehensive IT Controls framework spanning the entire IT organization.
- Regularly communicating risk information, IT governance initiatives, progress, and challenges to stakeholders at all levels of the organization.
- Identifying potential IT disruptions, analyzing their impact on business operations, and prioritizing mitigation strategies.
- Creating comprehensive IT resolution plans outlining steps for data backup, system restoration, communication protocols, and escalation procedures in case of major outages.
- Work with Valley Bank's Disaster Recovery team to regularly evaluate IT recovery plans through simulations and drills to promote effectiveness and identify areas for improvement.
- Maintaining detailed documentation of IT resolution plans, including system dependencies, critical data points, and contact information.
Required Skills:
- IT governance frameworks and risk management methodologies, including COBIT, ITIL, and NIST.
- Common security and privacy regulatory requirements and standards (e.g., PCI DSS, NIST 800-53, ISO2700x, etc.)
- Third-party risk management practices.
- Information Security risk management frameworks and compliance practices.
Strong leadership and program management skills, including leading cross-functional initiatives. - Demonstrated ability to select, develop, train, lead and inspire teams. Create a culture of continuous learning.
- Proven history leading IT Risk Management functions.
- Proven history in successfully developing and managing business disaster recovery and continuity planning.
- Ability to generate trust, build alliances across the organization, and orchestrate interdisciplinary teams to the benefit of customers.
- Ability to balance strategic thinking with pragmatic operational delivery.
- Ability to analyze data and identify trends to inform decision-making regarding IT resilience.
- Strong understanding of IT infrastructure, systems, networks, data storage, and disaster recovery technologies.
- Verifiable experience planning, executing, and monitoring IT recovery projects.
Understanding of relevant industry regulations related to IT resilience and disaster recovery.
Required Experience:
- Bachelor's degree in computer science, IT Governance, Information Security, or a related IT field.
- Recognized certification in Information Security such as: Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certification in Risk and Information Systems Control (CRISC) or Certified Information Systems Security Professional (CISSP)
- A minimum of ten years' experience working within an information governance function, preferably in the banking industry.
- Sound knowledge of industry-leading IT Controls framework and management practices.
- Practical experience in the implementation of IT controls, policies, and procedures.
- Experience in monitoring IT risk and IT operation controls to promote compliance.
- Experience consulting with Internal Audit and Risk function enforcing compliance with company policies and best practices.
- A good understanding of IT Governance including knowledge of IT Risk Management and controls.
- Expert working knowledge of COBIT, FFIEC Guidelines and CIS standards.
Preferred Experience:
- Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certification in Risk and Information Systems Control (CRISC) or Certified Information Systems Security Professional (CISSP).
Exact compensation may vary based on skills, experience, and location.
$146,800.00
$266,000.00
|
Valley National Bank
$146,800.00-$266,000.00
Jan 31, 2025