Associate Director, Divisional Controls and Resilience

NAB•New York, NY

11d•Onsite

About The Position

The Associate Director, Divisional Controls and Resilience is responsible for providing risk and control specialist guidance and support to the Northern Hemisphere business, including front office and enablement functions across the London, Paris and New York offices, while also providing regional leadership and oversight for Business Continuity, Disaster Recovery, Crisis Management, Operational Resilience and Data Management across those offices. This role is based in New York, USA.

Requirements

10 years experience in operational risk management
Experience in Control Design / Assurance Methodologies
SME knowledge in CIB products and the associated regulations
Ability to drive the value chain from front office to enablement from risk, control and operating model perspective
Strong understanding of Business Continuity, Disaster Recovery, Crisis Management and Operational Resilience frameworks, standards and testing practices.
Experience supporting data management activities, including critical data identification, records management and engagement with data protection stakeholders.
Tertiary qualification in a business related discipline
US citizenship or US working rights

Responsibilities

Support the Director, Divisional Controls and Resilience in developing and driving the strategic goals of the Divisional Controls and Resilience team
Provide advice and guidance on risk, control and obligation items at the divisional and end to end value chain level, including subject matter input for; business changes, event management, escalating operational risk, compliance events, systemic issues or breakdowns in the control environment
Identification of control gaps and weaknesses, looking for opportunities for making controls both automated and preventative rather than detective
Identification of risks and appropriate indicators to monitor trends and manage risk in the Business, including identification of areas where additional training is required
Lead the Business in implementing PACE process and controls mapping
Influence and drive efficiencies in Branch risk and controls, identifying opportunities for aligning with the Global EC community
Lead the business in completing their control self assessments, ensuring business owners are aware of and understand the operation of all controls within their responsibility
Manage activities to help the Business ensure core metrics are within threshold
Work with Controls Performance to ensure testing of controls is planned and performed effectively.
Provide regional oversight of Business Continuity, Disaster Recovery, Crisis Management and Operational Resilience activities, ensuring alignment with Group policies, standards and regulatory expectations.
Implement, maintain, review and challenge resilience deliverables, including Business Impact Analyses, Recovery Strategy Analyses, Business Continuity Plans, training and awareness activities, testing activities, capability assessments and compliance assessments.
Oversee tracking and resolution of issues arising from Disaster Recovery, Business Continuity and resilience testing, ensuring ownership is assigned and progress is monitored through to closure.
Conduct impact assessments and support incident classification, escalation and activation processes in accordance with Group Business Continuity Management standards.
Participate in Incident Management Team activities for the Northern Hemisphere, including the London, Paris and New York offices, ensuring relevant stakeholders understand their roles and responsibilities and that post-incident reviews and documentation are completed to Group standards.
Support the business in identifying, documenting and maintaining critical data elements for the Northern Hemisphere, including the London, Paris and New York offices, in accordance with Group policies and standards.
Ensure records of processing activities are complete and accurate for relevant business changes and support effective data management practices across the business.
Manage relevant third-party and internal stakeholder relationships supporting data management activities, including records management and offsite storage arrangements.
Liaise with relevant data protection and privacy stakeholders on data-related queries, including data impact assessments, data subject access requests and data breach matters.