Embedded Risk Associate Director

DTCC • Jersey City, NJ

3d • Hybrid

About The Position

The Embedded Risk Associate Director is a strategic first-line risk partner to Business and Product Management within DTCC’s Clearing & Security Services team. The role independently reviews and challenges management’s approach to identifying, assessing, responding to, monitoring, and reporting risks, and helps ensure risk response strategies adequately address identified internal and external risks. The position also challenges assessments of internal control effectiveness and supports adherence to control testing and issue management frameworks.

The role leads risk assessments and oversight for assigned businesses, including RCSAs, Comprehensive Program Risk Assessments, and assessments of significant initiatives or business and technology changes. It monitors the business risk profile; oversees incidents, issues, actions, and remediation; supports audits and regulatory obligations; and coordinates risk governance and senior-management reporting. The position works across the first, second, and third lines of defense and drives improvements to ERM practices.

DTCC offers a flexible hybrid model with three days onsite and two days remote. Compensation includes base pay and an annual incentive. The posting also describes health, life, well-being, retirement, paid time off, and leave benefits. Actual compensation depends on role, location, experience, skills, and other considerations.

Requirements

• At least 8 years of related experience.
• Bachelor’s degree preferred or equivalent experience.
• Familiarity with RCSAs, including risk identification, inherent and residual risk assessment, control design evaluation, and challenging risk ratings.
• Prior experience in Risk Management and Incident Management.
• Experience managing stakeholders and influencing senior leadership.
• Knowledge of issue lifecycle management, audits, and control frameworks.
• Financial services business acumen, including understanding supported business areas, critical services, client impacts, and aligning risk assessments to the business.
• Ability to leverage data for trend analysis, predictive risk identification, and reporting optimization.
• Proactive, focused on cultivating a risk mentality, and able to deliver in a fast-paced environment.
• Ability to act as a change ambassador and drive improvements.

Nice To Haves

• Inclination toward AI-driven risk insights, automation, and data-led decision-making.

Responsibilities

• Serve as a strategic first-line risk partner to Business and Product Management, providing independent-minded review and challenge and helping management identify, assess, monitor, mitigate, and communicate risks.
• Lead and coordinate Risk and Control Self-Assessments (RCSAs), including assessment of risk applicability, inherent risk, control effectiveness, and residual risk; challenge ratings and rationale; and drive business-owner review and approval.
• Lead Comprehensive Program Risk Assessments (CPRAs) and other change-risk assessments for strategic initiatives, modernization programs, new products or services, and significant business or technology changes.
• Monitor the business risk profile by integrating information from incidents, issues and actions, control performance, audits, regulatory matters, risk assessments, business changes, and strategic initiatives to identify emerging risks, concentrations, and trends.
• Review and challenge risk incidents and control breakdowns, including root cause, business and client impact, control alignment, recurring themes, and implications for the broader risk and control environment.
• Oversee the Issue and Action lifecycle, including self-identified issues, remediation plans, milestones, escalation of at-risk items, closure-package review, and sustainability considerations.
• Review and challenge the Process, Risk and Control framework, including control design, mappings, testing results, and GRC data.
• Lead ERM engagement for internal and external audits, coordinating business readiness and information requests, identifying potential risk or control concerns, supporting Management Self-Identified Issues where appropriate, and monitoring remediation of findings.
• Coordinate business risk governance and senior-management reporting, including quarterly risk meetings, risk-tolerance assessments, executive risk reporting, and other governance forums.
• Provide risk oversight and coordination across enterprise risk programs and regulatory obligations, including regulatory reporting, business continuity and resiliency, third-party risk, model risk, EUCAs, and clearing agency/link risk reviews.
• Partner across the first, second, and third lines of defense as the primary risk liaison among Business Management, Risk Family SMEs, Aligned Risk Management, Compliance, Audit, and other control functions.
• Drive continuous improvement and consistency across ERM practices, including opportunities to standardize processes, improve reporting and governance, strengthen documentation, and make activities more efficient and scalable.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension and retirement benefits.
• Paid time off, personal and family care, and other leaves of absence.

What This Job Offers

• Job Type: Full-time
• Career Level: Director