Segment Risk Manager - Technology Governance

Huntington National Bank•Chicago, IL

2d•Onsite

About The Position

The Segment Risk Manager – Technology Governance supports Information Technology Risk & Control (ITRC) activities and application governance across the Enterprise Payments application portfolio. The role administers, monitors, reviews, and challenges established enterprise application governance activities and serves as a technical governance consultant and translator between enterprise policy, standards, controls, and process owners and Payments business, product, application, and technology teams. It helps stakeholders understand applicable requirements and complete governance activities accurately and on time. The position performs routine Information Technology Risk Management (ITRM) reviews and approvals, assesses the substance and quality of risk documentation and supporting evidence, monitors governance obligations, and escalates concerns requiring additional attention. It owns recurring ITRM reporting and provides context on material changes, risk trends, overdue obligations, and recurring concerns. The role also supports ITRM strategy, portfolio analysis, enterprise change planning, and other assigned risk initiatives. This is an office-based position. The job posting notes that certain positions outside the branch network may be eligible for flexible arrangements, with specific work arrangements provided by the hiring team. The position is exempt from overtime pay. The annual compensation range is $77,000–$154,000, with eligibility to participate in an applicable incentive compensation plan. Huntington also offers health insurance, a wellness program, life and disability insurance, a retirement savings plan, paid leave programs, paid holidays, and paid time off.

Requirements

Bachelor’s degree, or four additional years of segment-specific or risk-related experience in lieu of a bachelor’s degree may be considered.
Minimum of 5 years of experience in Audit, Compliance, Risk Management, or Operational Risk.
Advanced knowledge of risk management principles and regulatory compliance requirements.
Ability to understand the nature, severity, and potential impact of technology vulnerabilities and communicate related concerns to technical and nontechnical stakeholders.
Ability to analyze risk and governance data, identify significant changes, and explain the business and risk context behind reporting results.
Ability to translate technical, risk, and governance requirements into clear, actionable expectations for business, product, application, and technology stakeholders.
Strong interpersonal skills and ability to build partnerships and work collaboratively across businesses.
Strong consulting skills and ability to influence outcomes and reinforce accountability without direct authority.
Ability to recognize when a technical or governance concern may extend beyond a single application and escalate it for broader review.
Ability to handle ambiguity, multitask, and work in a fast-paced environment.
Curiosity and commitment to developing deeper knowledge of technology, cybersecurity, application governance, and the Payments business.

Nice To Haves

Experience in vendor risk management, particularly evaluating and overseeing third-party applications.
Experience in information technology risk management, application risk, technology controls, application governance, cybersecurity, or a related discipline.
Technical knowledge of application architecture, infrastructure, cybersecurity vulnerabilities, and technology controls.

Responsibilities

Provide day-to-day ITRM governance support across the Enterprise Payments application portfolio and support adherence to enterprise application governance, risk, and control requirements.
Translate enterprise policy, standards, controls, and governance requirements for Payments business, product, application, and technology teams, helping stakeholders navigate governance processes.
Perform first-line review and challenge of application governance activities, documentation, and supporting evidence to assess completeness, appropriateness, and consideration of underlying risk.
Provide risk consultation, monitoring, and challenge while reinforcing appropriate ownership and keeping execution and remediation responsibilities with accountable teams.
Maintain visibility into findings, issues, remediation activities, control exceptions, and risk acceptances affecting Payments applications; consult with stakeholders and escalate significant delays, concerns, or governance gaps.
Initially review and challenge technology risk exceptions and risk acceptance requests, assessing rationale, compensating controls, remediation plans, target dates, and recurrence, and provide recommendations to the Segment Risk Manager Sr.
Monitor application governance activities through enterprise reporting and notification processes, including ServiceNow and Archer; engage stakeholders when action is required and escalate significant timeline or data-quality concerns.
Own and interpret monthly ITRM reporting for Enterprise Payments using ServiceNow, Archer, Tableau, Power BI, and other applicable sources; ensure reporting is accurate, complete, timely, and appropriately challenged, and explain material changes and trends.
Apply technical risk knowledge to understand and communicate application, infrastructure, cybersecurity, vulnerability, and control conditions; interpret technical architecture, integration, infrastructure, and data-flow diagrams and engage with technology teams.
Identify and escalate technical or governance concerns, explain potential risk and whether an issue may extend beyond an individual application, and determine when additional management attention is needed.
Collaborate with Enterprise Payments leadership and partners in Technology, Information Security, Identity and Access Management, Data Management and Governance, Service Continuity, Corporate Risk, Compliance, and Internal Audit.
Support ITRM strategy, portfolio analysis, enterprise change planning, and other assigned risk initiatives.
Perform other duties as assigned.