Segment Risk Manager - Technology Governance

Huntington National Bank•Columbus, OH

4d•$77,000 - $154,000•Onsite

About The Position

The Segment Risk Manager – Technology Governance supports Information Technology Risk & Control (ITRC) activities and application governance across the Enterprise Payments application portfolio. The role administers, monitors, reviews, and challenges established enterprise application governance activities and serves as a technical governance consultant and translator between enterprise policy, standard, control, and process owners and Payments business, product, application, and technology teams. The position performs routine Information Technology Risk Management (ITRM) reviews and approvals, evaluates risk documentation and supporting evidence, monitors governance obligations, and escalates concerns requiring additional attention. It owns recurring ITRM reporting and explains material changes, risk trends, overdue obligations, and recurring concerns. The role provides consultation and challenge while ensuring execution and remediation remain with accountable application, product, business, and technology teams. The position collaborates with Enterprise Payments leadership and partners across Technology, Information Security, Identity and Access Management, Data Management and Governance, Service Continuity, Corporate Risk, Compliance, and Internal Audit. It also supports ITRM strategy, portfolio analysis, enterprise change planning, and other assigned risk initiatives.

Requirements

Bachelor’s degree, or four additional years of segment-specific or risk-related experience may be considered in lieu of a bachelor’s degree.
At least 5 years of experience in Audit, Compliance, Risk Management, or Operational Risk.

Nice To Haves

Advanced knowledge of risk management principles and regulatory compliance requirements.
Experience in vendor risk management, particularly evaluating and overseeing third-party applications.
Experience in information technology risk management, application risk, technology controls, application governance, cybersecurity, or a related discipline.
Technical knowledge of application architecture, infrastructure, cybersecurity vulnerabilities, and technology controls.
Ability to understand the nature, severity, and potential impact of technology vulnerabilities and communicate concerns to technical and nontechnical stakeholders.
Ability to analyze risk and governance data, identify significant changes, and explain the business and risk context behind reporting results.
Ability to translate technical, risk, and governance requirements into clear, actionable expectations for business, product, application, and technology stakeholders.
Strong interpersonal skills and ability to build partnerships and collaborate with all businesses.
Strong consulting skills and ability to influence outcomes and reinforce accountability without direct authority.
Ability to recognize when a technical or governance concern may extend beyond a single application and escalate it for broader review.
Ability to deal with ambiguity, multitask, and work in a fast-paced environment.
Curiosity and commitment to developing deeper knowledge of technology, cybersecurity, application governance, and the Payments business.

Responsibilities

Provide day-to-day ITRM governance support across the Enterprise Payments application portfolio and support adherence to enterprise application governance, risk, and control requirements.
Translate enterprise policy, standards, controls, and governance requirements for Payments business, product, application, and technology teams, helping them navigate governance processes.
Review and challenge application governance activities, documentation, and evidence to assess completeness, appropriateness, and consideration of underlying risk.
Provide risk consultation, monitoring, and challenge while reinforcing appropriate ownership and keeping execution and remediation responsibilities with accountable teams.
Maintain visibility into findings, issues, remediation activities, control exceptions, and risk acceptances affecting Payments applications; consult stakeholders and escalate significant delays, concerns, or governance gaps.
Review and challenge technology risk exceptions and risk acceptance requests, assessing rationale, compensating controls, remediation plans, target dates, and recurrence, and provide recommendations to the Segment Risk Manager Sr.
Monitor application governance activities through enterprise reporting and notification processes, including ServiceNow and Archer, and engage stakeholders when action is required.
Own and interpret monthly ITRM reporting for Enterprise Payments using ServiceNow, Archer, Tableau, Power BI, and other applicable sources; ensure reporting is accurate, complete, timely, and appropriately challenged, and explain material changes and trends.
Apply technical risk knowledge to understand and communicate application, infrastructure, cybersecurity, vulnerability, and control conditions, including interpreting technical architecture, integration, infrastructure, and data-flow diagrams.
Identify and escalate technical or governance concerns, explain potential risks, assess whether concerns may extend beyond an individual application, and identify when additional management attention is needed.
Collaborate with Enterprise Payments leadership and partners across Technology, Information Security, Identity and Access Management, Data Management and Governance, Service Continuity, Corporate Risk, Compliance, and Internal Audit.
Support ITRM strategy, portfolio analysis, enterprise change planning, and other assigned risk initiatives.
Perform other duties as assigned.