Resiliency Control Testing Manager

Wintrust Financial Corporation•Rosemont, IL

About The Position

This role operates within the Security & Fraud First Line of Defense and provides objective assessments of control design and operating effectiveness, performed separately from day-to-day control ownership activities, to determine whether controls are appropriately mitigating risk and supporting the protection of the bank's critical business services. The Resiliency Manager partners closely with Cybersecurity, Physical Security, Technology, Fraud, Business Continuity, Operational Risk and Second Line of Defense Risk functions to evaluate control design and operating effectiveness, identify improvement opportunities, validate remediation activities, perform root cause analysis, and assess the sustainability of corrective actions. The role is accountable for establishing testing methodologies, developing risk-based testing plans, leading testing engagements, reporting results to leadership, supporting regulatory compliance requirements through alignment of findings to applicable regulations and standards, and continuously enhancing the Security and Fraud Control Testing Program. The position also leverages approved AI-enabled capabilities, analytics, and automation tools to improve testing efficiency, streamline evidence collection, enhance reporting quality, and identify trends across testing results. This is not a cybersecurity engineering position. Success in this role requires a strong control testing and assurance mindset combined with practical knowledge of cybersecurity, fraud risk management, technology controls, and operational resiliency practices.

Requirements

Strong control testing and assurance mindset.
Practical knowledge of cybersecurity.
Practical knowledge of fraud risk management.
Practical knowledge of technology controls.
Practical knowledge of operational resiliency practices.

Responsibilities

Provides objective assessments of control design and operating effectiveness.
Partners closely with Cybersecurity, Physical Security, Technology, Fraud, Business Continuity, Operational Risk and Second Line of Defense Risk functions to evaluate control design and operating effectiveness.
Identifies improvement opportunities.
Validates remediation activities.
Performs root cause analysis.
Assesses the sustainability of corrective actions.
Establishes testing methodologies.
Develops risk-based testing plans.
Leads testing engagements.
Reports results to leadership.
Supports regulatory compliance requirements through alignment of findings to applicable regulations and standards.
Continuously enhances the Security and Fraud Control Testing Program.
Leverages approved AI-enabled capabilities, analytics, and automation tools to improve testing efficiency, streamline evidence collection, enhance reporting quality, and identify trends across testing results.