IT Manager II - IT Governance, Risk and Controls

Western Alliance Bank • Columbus, OH

10d • Onsite

About The Position

The IT Manager II - IT Governance, Risk and Controls role is a first line of defense risk professional within the IT Governance team. The position is responsible for supporting and executing IT risk management activities aligned with the Company’s Risk Appetite and Corporate Strategy. You will partner with IT leadership, other Risk Teams and business stakeholders to identify, assess, and manage technology risks, ensuring compliance with regulatory expectations and internal standards. Oversee the development, tracking, and reporting of IT KRIs within GRC and Workfront platforms to provide timely insights into emerging risks and trends. Coordinate and help lead reviews of Service Organization Control (SOC) reports to validate IT control effectiveness and identify potential gaps impacting risk posture. Ensure the accuracy and completeness of the IT risk control inventory, including updates for new controls, retirements, and alignment with regulatory and internal standards. Develop and deliver high-quality materials for governance forums, ensuring clarity on risk issues, mitigation strategies, and decision-making support. Serve as a trusted advisor to IT stakeholders by offering guidance on risk identification, exception management, mitigation strategies, and compliance with enterprise risk frameworks. Aggregate and analyze data for issue owners to monitor remediation progress and escalate delays or concerns to leadership. Organize and execute mock regulatory exams and remediation exercises to strengthen preparedness for supervisory reviews and internal assessments. Prepare and present risk and control updates for key governance bodies, ensuring transparency and actionable insights. Create reports and presentations that communicate IT risk posture, trends, and strategic initiatives to senior leadership. Implement safety procedures and data recovery plans. Develop user manuals, as well as policies, procedures, and safety protocols. Work with IT Leadership in employee development, retention, resource planning, talent management, performance management, and achieve a diverse and engaged workforce as well as recruit, train, and evaluate staff members’ work. Analyze a variety of data and summarize findings in applicable reports or other communication mediums. Utilize data to identify areas of improvement and opportunities for growth by collaborating with business and tech leads.

Requirements

• 5+ years of IT risk management or related experience in areas such as IT Governance, Risk & Compliance, IT Controls, Audit coordination, or similar functions.
• Bachelor’s degree in Information Technology, Cybersecurity, Risk Management, or a related field required.
• Proven leadership experience with the ability to manage and develop teams, drive accountability, and foster collaboration across IT and business units.
• Intermediate knowledge of general Financial Services or Banking operations and their associated technology risk landscape is preferred.
• Intermediate knowledge of regulatory and compliance frameworks (e.g., FFIEC, SOX, GLBA) and industry standards (e.g., NIST, ISO).
• Experience managing IT risk programs and governance processes, including KRIs, control inventories, audit coordination, and regulatory deliverables.
• Proficiency in risk management tools and platforms and familiarity with IT control frameworks.
• Intermediate to advanced experience in managing mid-sized technology team within multiple functional areas while ensuring highest quality delivery of complex products or services.
• Intermediate to advanced experience with the execution KPIs and meeting timelines.
• Advanced speaking and writing communication skills.

Nice To Haves

• Advanced degree or certifications (e.g., CRISC, CISA, CISSP) preferred.
• Intermediate knowledge of general Financial Services or Banking operations and their associated technology risk landscape is preferred.

Responsibilities

• Support and execute IT risk management activities aligned with the Company’s Risk Appetite and Corporate Strategy.
• Partner with IT leadership, other Risk Teams and business stakeholders to identify, assess, and manage technology risks, ensuring compliance with regulatory expectations and internal standards.
• Oversee the development, tracking, and reporting of IT KRIs within GRC and Workfront platforms.
• Coordinate and help lead reviews of Service Organization Control (SOC) reports to validate IT control effectiveness and identify potential gaps impacting risk posture.
• Ensure the accuracy and completeness of the IT risk control inventory, including updates for new controls, retirements, and alignment with regulatory and internal standards.
• Develop and deliver high-quality materials for governance forums, ensuring clarity on risk issues, mitigation strategies, and decision-making support.
• Serve as a trusted advisor to IT stakeholders by offering guidance on risk identification, exception management, mitigation strategies, and compliance with enterprise risk frameworks.
• Aggregate and analyze data for issue owners to monitor remediation progress and escalate delays or concerns to leadership.
• Organize and execute mock regulatory exams and remediation exercises to strengthen preparedness for supervisory reviews and internal assessments.
• Prepare and present risk and control updates for key governance bodies, ensuring transparency and actionable insights.
• Create reports and presentations that communicate IT risk posture, trends, and strategic initiatives to senior leadership.
• Implement safety procedures and data recovery plans.
• Develop user manuals, as well as policies, procedures, and safety protocols.
• Work with IT Leadership in employee development, retention, resource planning, talent management, performance management, and achieve a diverse and engaged workforce as well as recruit, train, and evaluate staff members’ work.
• Analyze a variety of data and summarize findings in applicable reports or other communication mediums.
• Utilize data to identify areas of improvement and opportunities for growth by collaborating with business and tech leads.

Benefits

• Competitive salaries
• An ownership stake in the company
• Medical and dental insurance
• Time off
• A great 401k matching program
• Tuition assistance program
• An employee volunteer program
• A wellness program
• Opportunity to bolster business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands-on experience to help grow your career!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level