Director, Risk Management & Information Security

Stellantis Financial Services • Salt Lake, UT

7d • Onsite

About The Position

The Director of Risk Management and Information Security supports the Chief Risk Officer in building, maintaining, and continuously enhancing the bank's Enterprise Risk Management (ERM) framework. This role serves as a key advisor and subject matter expert across risk disciplines including credit risk, operational risk, compliance risk, liquidity risk, market risk, and strategic risk, leading risk identification, assessment, monitoring, and reporting activities across the organization to help ensure risks are managed within the bank's risk appetite and in conformance with applicable regulatory requirements. Additionally, this role will serve as the bank's designated Information Security Officer, responsible for developing, implementing, and overseeing the bank's information security program in accordance with GLBA Safeguards requirements and applicable regulatory guidance. The role works closely with first-line business units, Finance, Compliance, Legal, Internal Audit, and senior leadership to foster a strong risk culture and provide actionable risk intelligence that supports sound decision-making across the bank, with strong potential for growth as the risk function expands.

Requirements

• Minimum seven (7) years of progressive risk management experience in the financial services industry, with a strong preference for experience at a bank or bank holding company.
• Minimum three (3) years of information security, cybersecurity, or technology risk experience at a regulated financial institution; prior experience serving as, or directly supporting, an Information Security Officer or CISO strongly preferred.
• Demonstrated experience in two or more of the following risk disciplines: credit risk, operational risk, compliance/regulatory risk, model risk, or enterprise risk management.
• Experience with consumer lending products (e.g., auto loans, personal loans, credit cards) and/or small business lending, including understanding of associated credit risk and regulatory requirements (e.g., ECOA, TILA, FCRA, CRA).
• Prior experience working directly with bank regulators, including supporting regulatory examinations and responding to supervisory findings.
• Experience developing and presenting risk reports, dashboards, and committee materials to senior management and Board-level audiences.
• Bachelor's degree in Finance, Accounting, Economics, Business Administration, Mathematics, or a related field
• Candidates must possess authorization to work in the United States.

Nice To Haves

• Master's degree (MBA, MS in Finance, or MS in Risk Management) preferred.
• Relevant professional certification(s) such as Certified Risk Manager (CRM), Financial Risk Manager (FRM), Professional Risk Manager (PRM), CIA/CPA, or information security certifications such as CISSP, CISM, or CRISC.
• Experience building or contributing to the development and growth of risk management frameworks, policies, governance structures, and supporting infrastructure within a growing organization is preferred.
• Prior experience supporting or leading capital adequacy assessments or stress testing programs at a community or mid-size bank.
• Experience with captive auto finance, indirect lending, or related auto financial services products, and familiarity with auto-related consumer lending risk dynamics and market trends.
• Familiarity with digital banking risk considerations as the bank continues to grow its product and distribution footprint.

Responsibilities

• Support the Chief Risk Officer (CRO) in maintaining and evolving the bank's Enterprise Risk Management (ERM) framework, including risk governance, risk appetite, policies, taxonomy, and overall Risk function continuity.
• Serve as a strategic partner to the CRO, representing the Risk function at management and Board-level governance committees while acting as a risk subject matter expert who provides effective challenge and trusted advisory support to first-line business partners in accordance with the bank's three-lines-of-defense model.
• Develop, maintain, and present comprehensive risk reporting to senior management, the Board of Directors, and applicable Board committees (e.g., Risk Committee, Audit Committee), including key risk indicators (KRIs), risk appetite metrics, and emerging and external risk assessments informed by regulatory developments, industry trends, peer bank benchmarking, and macroeconomic conditions.
• Lead and coordinate the bank's risk and control self-assessment (RCSA) process across all business lines, including consumer lending, small business lending, deposits, and operations, ensuring risks are identified, rated, and mapped to controls.
• Oversee second-line credit risk management activities, including review of credit policy exceptions, portfolio concentration analysis, loan-level risk monitoring, and coordination with the credit and underwriting teams on risk-related matters for consumer and small business portfolios.
• Manage the bank's second-line operational risk program, including incident and loss event tracking, root cause analysis, operational risk appetite monitoring, and coordination on business continuity and third-party risk management activities.
• Serve as the bank's designated Information Security Officer (ISO), responsible for the enterprise information security program and second-line cybersecurity risk oversight, including governance, cybersecurity risk assessments, security awareness training, cyber incident response coordination, threat and vulnerability escalation, regulatory readiness, framework alignment (e.g., NIST Cybersecurity Framework), and periodic reporting to senior management and the Board regarding program effectiveness and material cyber risks.
• Partner with Compliance and Legal to monitor and assess regulatory and compliance risk, including tracking regulatory changes, supporting exam management, ensuring timely remediation of regulatory findings, audit observations and interacting with examiners as needed.
• Support the bank's model risk management, stress testing, scenario analysis, and capital adequacy assessment activities, including model inventory governance and validation oversight, performance monitoring, and collaboration with Finance on capital planning, while serving as the primary liaison for independent consultants and third parties engaged for model validation, independent testing, or specialized risk assessments.
• Conduct new product and initiative risk reviews, evaluating inherent risks associated with proposed products, services, geographies, or process changes, and providing risk-based recommendations prior to approval and launch.
• Perform other duties as assigned by the Chief Risk Officer in support of the bank's risk management objectives and strategic plan.

Benefits

• Stellantis Financial Services, Inc (SFS) is an equal opportunity employer and is committed to providing its employees with an environment that is free of harassment, discrimination, and intimidation.

What This Job Offers

• Job Type: Full-time
• Career Level: Director