Segment Risk Manager - Cybersecurity

Huntington National Bank•Columbus, OH

1d•Onsite

About The Position

The Segment Risk Manager oversees and administers operational and regulatory risk strategy programs for a business segment. The role leads risk identification, assessment, and effective challenge across Identity and Access Management (IAM), with a focus on identity governance and administration, access lifecycle management, authentication and authorization, single sign-on (SSO) and federation, and privileged access management. The manager ensures material risks and control gaps are identified, escalated, and managed, and oversees issues from initial ideation through validation and closure. The position performs risk assessments for defined scopes and planned initiatives in alignment with enterprise risk management frameworks; supports processes including Risk and Control Self-Assessment (RCSA), Exception Management, and assigned business governance groups; and advises on control design, cybersecurity standards and policies, metrics, and processes. The role also supports executive reporting on risk, issues, and controls; advises business partners on emerging challenges and opportunities; escalates issues requiring senior management attention; and collaborates with business segment management, audit, and corporate risk to develop action plans and target dates. The manager must remain aware of credit risk associated with the assigned business segment and perform other duties as assigned. This is an office workplace position. Specific work arrangements are provided by the hiring team; certain positions outside the branch network may be eligible for a flexible work arrangement combining in-office and work-from-home work.

Requirements

Bachelor’s degree, or, in lieu of a bachelor’s degree, four additional years of segment-specific or risk-related experience may be considered.
At least 5 years of experience in audit, compliance, risk management, or operational risk.
At least 7 years of experience within the financial services industry.
At least 4 years of experience working at a Category 3 or higher financial institution.
Excellent communication skills, including the ability to negotiate internally, often at a senior level.
Organized, responsive, and highly thorough problem solver.
Demonstrable cyber risk knowledge based on work in real-world environments and situations.

Nice To Haves

3 or more years of experience supporting IAM processes, procedures, and technologies, including identity governance, access management, authentication, authorization, and privileged access management.
2 or more years of experience in cybersecurity or a related domain.
2 or more years of experience with one or more cloud platforms: AWS, Azure, or GCP.
2 or more years of experience with deployment pipelines, DevOps, containers, and APIs.
2 or more years of experience with threat modeling.
2 or more years of experience with cybersecurity-related policy, procedures, or standards governance.
2 or more years of experience with quantitative or qualitative risk assessments.
CISSP, CISM, CISA, GIAC, CIPP/US, or other security or privacy certifications.

Responsibilities

Evaluate the effectiveness of controls and escalate concerns as appropriate.
Lead risk identification, assessment, and effective challenge across IAM, including identity governance and administration, access lifecycle management, authentication and authorization, SSO and federation, and privileged access management.
Ensure material risks and control gaps are identified, escalated, and managed.
Manage issues through their lifecycle, from ideation to validation and closure.
Execute risk assessments for defined scopes and planned initiatives in alignment with enterprise risk management frameworks.
Support and execute processes including RCSA, Exception Management, and assigned business governance groups.
Provide advice and guidance on control design, cybersecurity standards and policies, metrics, and processes to help meet regulatory or maturity requirements.
Support executive reporting on the health and status of the risk, issues, and control portfolio.
Act as a trusted advisor to customers, providing a risk perspective on ambiguous challenges and opportunities.
Escalate issues requiring senior management attention in a timely manner.
Work with business segment management to ensure the risk function supports strategic goals.
Collaborate with audit, business segment, and corporate risk to address issues with plausible action plans and target dates.
Remain aware of credit risk associated with the assigned business segment.
Perform other duties as assigned.