IT Risk Program Manager

Ameris Bank•Atlanta, GA

7d•Onsite

About The Position

The IT Risk Program Manager will document and monitor the Ameris Bank technology ecosystem to ensure proper system functionality of the IT control environment associated with Sarbanes-Oxley Audit and other internal audits. This role supports the New Initiative Committee with documentation for inherent and residual risk assessments and risk workbooks. The position is primarily focused on IT risk management but also plays a key part in assisting the Director of Business Continuity with all aspects of the IT Governance, Risk and Compliance (GRC) program, including day-to-day operations as well as the ongoing strategic and tactical evolution and maturation of the program and processes. Performs other projects and duties as assigned.

Requirements

Strong knowledge of Sarbanes-Oxley (SOX) SOC reports and IT general controls.
Strong knowledge of control testing.
Strong process facilitation, project management, and analytical skills.
Ability to operate with a high degree of independence to effectively manage schedules and competing priorities.
Able to understand and leverage team dynamics to improve overall outcomes.
Able to work diligently to provide quality results with little direction or follow up.
Proficient computer skills using various software packages, including Microsoft Office and AuditBoard (CrossComply).
Advanced proficiency in Microsoft Excel (Pivot Tables and VLOOKUP Comparisons).
Risk Management experience in financial institution subject to highly regulated systems, heightened standards, specifically in IT governance, risk, and compliance required.
Experience contributing to the development of risk assessment documentation, including frameworks, policies, standards, procedures, or similar materials required.
Bachelor’s degree required.

Nice To Haves

Minimum of 5 years of financial service/technology experience strongly preferred.
CISA and/or CRISC Certifications strongly preferred.

Responsibilities

Support the design and oversight of IT controls and coordinates with IT audit to implement, monitor, and design remediation strategies.
Design and manage the IT SOX control matrix for annual testing and evidence collection.
Lead and support IT Risk Assessment strategy aligning to Ameris Bank’s IT and security control frameworks.
Interact as facilitator between technology and internal/external auditors.
Support day-to-day operations of IT Governance, Risk and Compliance functions.
Execute technology risk management processes and provide input to support continuous improvement of process and program design.
Support internal and external audit processes or relevant compliance concerns, including SOX or Non-SOX applications.
Interact with other enterprise functions, including Internal Audit, Security Risk and Compliance, Enterprise Risk Management, and IT delivery teams to ensure the risk management process is efficient and effective.
Quantify inherent and residual IT risk levels to enhance analytics, inform prioritizations, and for use in management reporting.
Work with risk remediation owners to establish remediation plans with milestones and target dates and monitor progress towards remediation and escalating as appropriate.
Participate and contribute to technology project initiatives relating to technology risk assessment, risk remediation, and risk management.
Investigate and identify the root cause and corrects items deemed non-compliant, regardless of pressures from business or management.
Work diligently to improve relationships between key individuals and departments to achieve seamless cross-team dialogue and positively impact results. Use informal networks to gain support for ideas and projects.
Monitor adherence to policies, regulations, processes, and procedures within IT and actively undertakes corrective action where necessary.
Maintain working knowledge of regulations impacting IT risks.