GRC Platform Manager

BankUnited, Inc.•Miami Lakes, FL

About The Position

Enterprise Risk Management (ERM) manages the Governance, Risk and Compliance (GRC) platform for the enterprise. The GRC system allows the organization to have a centralized framework for assessing, aggregating and reporting various risks across the enterprise in a complete and timely manner. The GRC Platform Manager plays a pivotal role in the deployment of multiple solutions on the platform working alongside internal teams, implementation and vendor partners by gathering requirements and translating them into system-based process and functions for successful deployments that enchants the platforms customers. The incumbent will need to work closely with internal and external stakeholders, in particular, the IT Application Delivery & Production Support team. Once the system is implemented, the GRC Product Manager will serve be the overall GRC platform manager, ensuring the system is up to date with patches and plans for at least annual upgrades, while making sure the organizational structure and risk taxonomies are current and maintained. The GRC Platform Manager will also assist in other Risk Administration activities, as required.

Requirements

Bachelor's Degree in business, finance or computer science related major required.
4 - 6 years direct experience in delivery of complex, multidisciplinary projects, ideally in some leadership capacity required.
4 - 6 years working under the Agile framework required.
4 - 6 years experience in Risk Management required.

Nice To Haves

1 - 3 years prior experience working with leading GRC systems preferred.
1 - 3 years proficiency with Tableau preferred.
Certified Scrum Manager preferred.
Certified Scrum Product Owner preferred.
Ability to communicate effectively at all levels of the organization.
Ability to establish productive working relationships with key stakeholders across the organization.
Creative problem solver driven by facts.
Advanced skills with Microsoft PowerPoint, Word, Excel and visualization tools.
Candidates residing in locations within BankUnited's footprint may be given preference.

Responsibilities

Oversee the management of the GRC platform, ensuring optimal performance, availability, and scalability.
Configure and customize GRC modules, including workflows, reports, dashboards, and user roles to meet business requirements.
Configure and assist with testing changes to the GRC platform.
Perform system upgrades and apply patches as necessary to keep the platform secure and up to date in coordination with Information Technology.
Assist in the design and delivery of educational training or other materials to support desired organizational risk management culture.
Lead new module implementations or module reconfigurations; work closely with lines of business to understand their GRC requirements and deliver solutions using the GRC platform.
Oversee GRC change management in coordination with IT Application Support and the vendor, as required.
Provide advice and guidance on necessary enhancements or changes to the system to improve end-user experience or system functionality.
Provide technical support to end-users, addressing issues related to user access, data accuracy, and system functionality.
Oversee data imports, exports, and migrations; ensure data integrity, consistency, and accuracy within the MetricStream platform; create and maintain detailed documentation for system configurations, workflows, processes, and troubleshooting procedures.
Prioritize the development/release of product features and capabilities.
Manage the vendor relationship and participate in product user group/conferences as appropriate.
Monitor the market and develop competitive analysis.
Ensure that the GRC platform aligns with BankUnited's Technology controls; implement appropriate access controls and conduct periodic system audits.
Knowledge of information systems architects and administration best practice.
Knowledge of data modeling, data architectures and data management best practices.
Knowledge of IT General Controls and Application controls within a recognized framework (COSO, COBIT, etc.).
Knowledge of core GRC processes (Risk Assessment, Control Testing and Assessment, Policy Management, Regulatory Compliance, Internal Audit, Corrective Action Planning, etc.).
Preferable, knowledge of SQL, JSON, HTML and other common information system languages.
General knowledge of API and other interfacing methods.
Knowledge of information systems security, authorization, permission and authorization best practices and requirements.
Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.).
Adheres to Bank policies and procedures and completes required training.
Identifies and reports suspicious activity.