Manager IT Risk Governance

$125,000 - $216,000/Yr

First Citizens Bank - Raleigh, NC

Full-time - Manager

Hybrid - Raleigh, NC

Credit Intermediation and Related Activities

About the position

The Manager of IT Risk Governance oversees Governance, Risk, and Compliance (GRC) services within the Information Security department. This role is pivotal in developing and maintaining the strategic mission of the RCSA GRC function, ensuring effective processes are in place to deliver GRC services across the bank. The position requires building influential relationships with management, regulators, internal audit, and business partners to enhance the organization's risk management capabilities.

Responsibilities

• Defines process, standards, and procedures utilized by the team.
• Builds strong partnerships with industry peers, government agencies, and risk management communities.
• Monitors the industry for emerging techniques and technology applicable to Bank operations.
• Manages GRC capabilities that identify, analyze, and mitigate risk for various information security and business units.
• Leads the development and reporting of RCSA results and risk information to executive leadership.
• Coordinates security efforts and audits by both internal and external parties.
• Establishes and monitors expectations to achieve company and department goals.
• Makes appropriate changes to team policies, procedures, and efficiencies to meet objectives.
• Manages the performance, training, and evaluation of assigned staff.
• Designs processes, risks, and controls and conducts RCSA activities in coordination with the Lines of Business within Information Security.

Requirements

• Bachelor's Degree and 8 years of experience in Information Technology Security, Operations, Risk Management, or Audit OR High School Diploma or GED and 12 years of experience in Information Technology Security, Operations, Risk Management, or Audit.
• Ability to develop and implement information security strategies in large, complex environments.
• Effective at communicating audience-appropriate information to technical, management, and executive levels.
• Proficiency in assessing risk and risk management.
• Knowledge of IT policies, standards, and procedures frameworks as well as their development and implementation.
• Knowledge of standard risk management or control frameworks such as COBIT, ISO, and ITIL.
• Knowledge of regulatory requirements and guidelines.

Benefits

• Comprehensive benefits program for full-time associates (20+ hours) with customized offerings designed to support families.