IT Risk Program Manager

Ameris Bank•Atlanta, GA

About The Position

The IT Risk Program Manager documents and monitors Ameris Bank’s technology ecosystem to help ensure proper system functionality and the effectiveness of the IT control environment associated with Sarbanes-Oxley audits and other internal audits. The role supports the New Initiative Committee by preparing documentation for inherent and residual risk assessments and risk workbooks. It is primarily focused on IT risk management and also assists the Director of Business Continuity with day-to-day operations and the strategic and tactical evolution of the IT Governance, Risk and Compliance (GRC) program and its processes. Other projects and duties may be assigned. The position works with technology teams, auditors, and enterprise functions to manage IT controls and assessments, support audits and compliance, monitor remediation, and improve risk processes. It also monitors adherence to IT policies, regulations, processes, and procedures and maintains working knowledge of regulations affecting IT risks.

Requirements

Strong knowledge of Sarbanes-Oxley (SOX), SOC reports, and IT general controls.
Strong knowledge of control testing.
Strong process facilitation, project management, and analytical skills.
Ability to work independently and effectively manage schedules and competing priorities.
Ability to understand and leverage team dynamics to improve outcomes.
Ability to deliver quality results with little direction or follow-up.
Proficiency with Microsoft Office and AuditBoard (CrossComply).
Advanced proficiency in Microsoft Excel, including Pivot Tables and VLOOKUP comparisons.
Required risk management experience in a financial institution subject to highly regulated systems and heightened standards, specifically in IT governance, risk, and compliance.
Required experience contributing to risk assessment documentation, including frameworks, policies, standards, procedures, or similar materials.
Bachelor’s degree required.

Nice To Haves

A minimum of 5 years of financial services or technology experience is strongly preferred.
CISA and/or CRISC certifications are strongly preferred.

Responsibilities

Support the design and oversight of IT controls and coordinate with IT audit on control implementation, monitoring, and remediation strategies.
Design and manage the IT SOX control matrix for annual testing and evidence collection.
Lead and support IT risk assessment strategy in alignment with Ameris Bank’s IT and security control frameworks.
Facilitate interactions between technology teams and internal and external auditors.
Support day-to-day IT Governance, Risk and Compliance operations.
Execute technology risk management processes and contribute to continual improvement of processes and program design.
Support internal and external audits and relevant compliance matters, including SOX and non-SOX applications.
Coordinate with Internal Audit, Security Risk and Compliance, Enterprise Risk Management, and IT delivery teams to make risk management efficient and effective.
Quantify inherent and residual IT risk levels to support analytics, prioritization, and management reporting.
Work with remediation owners to establish plans, milestones, and target dates; monitor progress and escalate as appropriate.
Participate in technology initiatives related to risk assessment, remediation, and management.
Investigate root causes and correct non-compliant items, including when there is pressure from business or management.
Build relationships across individuals and departments, support cross-team dialogue, and use informal networks to gain support for ideas and projects.
Monitor adherence to IT policies, regulations, processes, and procedures and take corrective action when necessary.
Maintain working knowledge of regulations affecting IT risks.
Perform other projects and duties as assigned.

Benefits

Medical, dental, and vision insurance; Ameris Bank absorbs a major portion of healthcare costs, with coverage eligibility beginning the first of the month following 30 days of employment.
Life insurance provided at no additional cost.
Accidental death and dismemberment coverage.
Long-term disability coverage.
Paid sick and vacation leave.
11 holidays.
Volunteer/service day.
Employee stock purchase plan.
401(k) retirement plan with a 50% match on the first 8% of employee contributions.
Flexible spending accounts.
Health savings account.
Health reimbursement arrangement.
Supplemental life and other insurance plans.
Identity theft protection.
Pet insurance.
Legal insurance.
Employee assistance program.
Employee advocacy program.
Entertainment discounts through Tickets at Work.
AT&T employee discount.
Wellness discounts for medical premiums and other rewards.
Employee referral incentive.
Education assistance.
Employee Resource Groups.
Employee banking advantages, including free interest checking, free safe deposit box, free money orders, travelers’ checks and cashier’s checks, mortgage origination fee discount, and free online banking and unlimited online bill payment.