IT Manager III - First Line IT Governance, Risk & Compliance (GRC)

Western Alliance Bancorporation•Phoenix, AZ

41d

About The Position

Western Alliance Bank is seeking a First Line IT Governance, Risk & Compliance (GRC) Manager III - This role is a first line of defense risk professional within the IT Governance, Risk & Compliance (GRC) team. The position is responsible for supporting and executing IT risk management activities aligned with the Company's Risk Appetite and Corporate Strategy. You will partner with IT leadership, other Risk Teams and business stakeholders to identify, assess, and manage technology risks, ensuring compliance with regulatory expectations and internal standards.

Requirements

7+ years of IT risk management or related experience in areas such as IT Governance, Risk & Compliance, IT Controls, Audit coordination, or similar functions.
Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field required; Advanced degree or certifications (e.g., CRISC, CISA, CISSP) preferred.
Proven leadership experience with the ability to manage and develop teams, drive accountability, and foster collaboration across IT and business units.
Intermediate knowledge of financial services or banking operations and their associated technology risk landscape is preferred.
Intermediate to advanced knowledge of regulatory and compliance frameworks (e.g., FFIEC, SOX, GLBA) and industry standards (e.g., NIST, ISO).
Experience managing IT risk programs and governance processes, including KRIs, control inventories, audit coordination, and regulatory deliverables.
Ability to analyze complex data sets and summarize findings into actionable insights for governance reporting and executive presentations.
Exceptional communication skills, both written and verbal, with the ability to influence stakeholders and present to senior leadership and committees.
Proficiency in risk management tools and platforms and familiarity with IT control frameworks.
Willingness to travel up to 25% as needed

Nice To Haves

Advanced degree or certifications (e.g., CRISC, CISA, CISSP) preferred.
Intermediate knowledge of financial services or banking operations and their associated technology risk landscape is preferred.

Responsibilities

Oversee the development, tracking, and reporting of IT KRIs within GRC and Workfront platforms to provide timely insights into emerging risks and trends.
Coordinate and helps lead reviews of Service Organization Control (SOC) reports to validate IT control effectiveness and identify potential gaps impacting risk posture.
Ensure the accuracy and completeness of the IT risk control inventory, including updates for new controls, retirements, and alignment with regulatory and internal standards.
Develop and deliver high-quality materials for governance forums, ensuring clarity on risk issues, mitigation strategies, and decision-making support.
Act as the primary liaison for IT-related audit requests and Federal Reserve Board (FRB) Data Request Lists (DRLs), ensuring timely and accurate responses.
Serve as a trusted advisor to IT stakeholders by offering guidance on risk identification, exception management, mitigation strategies, and compliance with enterprise risk frameworks.
Aggregate and analyze data for issue owners to monitor remediation progress and escalate delays or concerns to leadership.
Organize and execute mock regulatory exams and remediation exercises to strengthen preparedness for supervisory reviews and internal assessments.
Prepare and present risk and control updates for key governance bodies, ensuring transparency and actionable insights.
Create executive-level reports and presentations that communicate IT risk posture, trends, and strategic initiatives to senior leadership.