Lead First Line Risk Management, Technology

Early Warning® • Chicago, IL

7d • $104,000 - $156,000 • Hybrid

About The Position

The Lead First Line Risk Management, Technology supports technology-related examinations, audits, and assessments by coordinating across multiple technology departments. The role manages requests from external regulators, internal and external auditors, and Compliance, working with relevant business stakeholders and teams across the organization. It also identifies controls and documentation that align with regulatory expectations, internal policy, and organizational best practices, and ensures these materials can be efficiently archived and retrieved.

The position manages audit and exam documentation from request through delivery, including checking materials for relevance, accuracy, and completeness; obtaining leadership approval; and monitoring delivery deadlines. It contributes to audit readiness, regulatory compliance, remediation tracking, process improvement, and reporting to leadership. The role reports to the Director, First Line Risk Management, Technology. The work follows a hybrid model.

Requirements

• At least five years of experience actively leading external exams and audits, such as OCC, CFPB, PCI DSS, or SOC 2, as well as internal audits.
• Experience in security, governance, risk management, IT audit, information technology, or a related field.
• Knowledge of key laws, regulations, frameworks—including the Cyber Risk Institute (CRI) framework—and guidance in the financial services industry.
• Experience with Onspring, Jira, ServiceNow, or other GRC and workflow tools.
• Typically eight or more years of related experience.
• Ability to establish and maintain productive relationships with leaders, departments, partners across the organization, and external parties.
• Strong organizational and project management skills, including the ability to prioritize multiple simultaneous projects.
• Resourcefulness and ability to use internal relationships to obtain quick engagement.
• Bachelor’s degree or equivalent work experience.
• Must independently be eligible to work in the United States at the date of hire; employment visa sponsorship is unavailable.
• Must complete a background and drug screen.
• Must be able to perform the essential functions and physical requirements of the position with or without reasonable accommodation.

Nice To Haves

• Knowledge of financial services laws, regulations, frameworks, and guidance typically gained through five or more years in a compliance or risk management role.
• Certified Information Systems Auditor (CISA) certification.
• Prior GRC, Information Security and Technology Consulting, or Advisory experience with a leading consulting firm such as KPMG, Deloitte, EY, or PwC.

Responsibilities

• Manage internal and external audits and regulatory exams, coordinating, standardizing, reviewing, and obtaining approval for requested documentation and ensuring timely delivery.
• Ensure materials provided in response to requests are relevant, accurate, and complete; provide guidance and revision recommendations when deliverables do not meet requirements.
• Identify and implement efficiencies in coordination with the Compliance Regulatory Relations Program.
• Work with Compliance and business teams on program, process, and documentation changes resulting from new or revised laws and regulations, or learnings from external litigation.
• Compare controls, policies, procedures, work instructions, and other internal documentation with regulations and exam manuals; work with appropriate teams to submit self-identified issues when gaps are found.
• Design and conduct audit readiness and preparedness activities before internal and external audits to reduce audit findings.
• Identify, document, structure, update, and archive materials likely to be requested for audits and exams; analyze historical requests, findings, and related information to identify opportunities to reuse materials.
• Review policy, procedure, and system updates and make recommendations based on regulatory and audit or exam requests and findings.
• Complete projects supporting regulators, auditors, and the Compliance department.
• Regularly report status and issues to leadership.
• Track and report remediation progress by owners of exam and audit findings.
• Support the company’s risk management commitment and protection of the integrity and confidentiality of systems and data.

Benefits

• Competitive medical (PPO/HDHP), dental, and vision plans.
• Company contributions to a Health Savings Account or pre-tax flexible spending accounts for commuting, health, and dependent-care expenses.
• 401(k) plan with a 100% Company Safe Harbor Match on the first 6% deferred, immediately upon eligibility.
• Flexible Time Off for exempt employees and generous PTO for non-exempt employees.
• 11 paid company holidays and one paid volunteer day.
• 12 weeks of paid parental leave.
• Maven Family Planning support, including egg freezing, fertility, adoption, surrogacy, pregnancy, postpartum, early pediatrics, and returning to work.
• Eligibility for a discretionary incentive plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior