Technology Governance Risk Manager

Zions Bancorporation•Midvale, UT

1d•Onsite

About The Position

Zions Bancorporation’s Enterprise Technology and Operations (ETO) team is transforming what it means to work for a financial institution. With a commitment to technology and innovation, we have been providing our community, clients and colleagues the best experience possible for over 150 years. Help us transform our workforce of the future, today. We are seeking a Technology Governance Risk Manager to join our Information Technology Risk Management (ITRM) organization. In this strategic role, you will design, establish, and oversee a centralized governance program to ensure consistency, maturity, and effectiveness across IT governance. Acting as a Line 1.5 function, this Technology Governance Risk Manager will provide independent oversight, challenge, and guidance to first-line technology teams while enabling scalable, standardized governance practices. You will partner closely with IT, risk, and second line leadership to ensure programs are well-managed, aligned to enterprise frameworks, and positioned to proactively manage risk. This Technology Governance Risk Manager is a high-impact opportunity to shape governance strategy, drive program maturity, and strengthen the overall technology control environment.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Business, Risk Management, or a related field (required)
6+ years of experience in IT Risk Management, Technology Governance, IT Audit, or related areas, with demonstrated progression in responsibility
Experience operating in or alongside Line 1, Line 1.5, or Line 2 risk functions
Strong knowledge of IT control and governance frameworks (e.g., NIST, ISO 27001, COBIT)
Experience designing or overseeing governance programs, frameworks, or operating models
Ability to assess control environments and provide effective challenge and guidance
Excellent communication and executive-level presentation skills
Strong analytical and strategic thinking capabilities with the ability to translate ambiguity into structured solutions
Proven ability to influence without authority and build relationships across technical and business teams
Experience with governance metrics, reporting, and risk insights
Project/program management experience with the ability to drive enterprise initiatives

Nice To Haves

Experience in financial services or a regulated industry
Professional certifications such as CISA, CRISC, CISSP, or CGEIT
Experience building or maturing enterprise governance or risk programs
Familiarity with regulatory expectations impacting IT risk and governance

Responsibilities

Establish and Lead Governance Program: Design and implement a centralized governance monitoring program for IT risk and governance functions. Define standards, methodologies, and minimum control expectations for IT governance teams. Ensure consistent application of governance practices across technology domains.
Provide Oversight and Challenge (Line 1.5): Deliver independent review and credible challenge of IT governance activities. Assess program effectiveness, control design, and execution quality across teams. Identify gaps and drive alignment to enterprise risk expectations.
Drive Program Consistency and Maturity: Develop maturity models, assessment frameworks, and benchmarking approaches. Conduct periodic reviews of governance programs to ensure sustainability and scalability. Promote continuous improvement and adoption of leading practices.
Partner with IT and Risk Leadership: Collaborate with technology leaders to strengthen governance structures and accountability. Act as a trusted advisor to IT governance teams on program design and improvement. Facilitate alignment between first-line execution and second-line expectations.
Frameworks, Policies, and Standards: Ensure alignment with enterprise risk frameworks (e.g., NIST, COBIT, ISO). Drive adherence to internal policies, standards, and regulatory expectations. Support development and refinement of governance-related policies and procedures.
Monitoring, Metrics, and Reporting: Define and oversee governance KPIs, KRIs, and performance metrics. Provide reporting and insights to senior leadership on governance effectiveness and risk posture. Identify trends and systemic issues requiring escalation or remediation.
Support Risk and Compliance Activities: Coordinate with audit, regulatory, and compliance functions. Ensure governance teams are prepared for audits and exams. Track and validate remediation of findings related to governance gaps.
Enablement and Education: Develop training and guidance to uplift governance capabilities across IT teams. Promote strong risk culture and accountability within the first line. Support onboarding and capability building for governance roles.