Technology Risk & Control Director – Resiliency, Third Party, and Infrastructure

Huntington National Bank•Charlotte, NC

3d•Onsite

About The Position

The Technology Risk & Control Director is a front-line risk and control leader responsible for strengthening risk ownership, control execution, and operational resilience across technology, cybersecurity, and resiliency domains. The role partners with technology, operations, independent risk, compliance, audit, and executive stakeholders to identify, assess, manage, and report risk in alignment with the three lines model. The successful candidate brings substantial technology risk experience from a top-tier financial institution or another highly regulated industry, direct front-line risk and control experience, and the executive presence to prepare and present polished materials for senior management, regulatory, and Board audiences. The director leads leaders and builds a high-performing team accountable for risk identification, control design and execution, issue management, risk reporting, and sustainable remediation. The role oversees risk and control activities involving infrastructure and application resilience, disaster recovery, business continuity dependencies, third-party technology resilience, incident management, and control testing outcomes. It also prepares executive-ready materials, regulatory responses, Board reporting, risk assessments, issue updates, and decision papers. The position requires seasoned judgment in senior forums, effective representation of the front-line risk and control perspective, and strong partnerships across the enterprise. The leader promotes a strong risk culture through proactive communication, disciplined execution, issue ownership, and thoughtful challenge in support of safe and resilient technology delivery. Other duties may be assigned.

Requirements

Bachelor's degree or equivalent level of work experience.
10+ years of experience in technology, resiliency, technology risk, operational risk, or related risk and control roles.
8+ years of direct front-line risk and control experience in a top-tier financial institution or other highly regulated industry.

Nice To Haves

Demonstrated experience operating within the three lines model, including direct engagement with independent risk management, compliance, audit, and regulatory stakeholders.
Experience leading leaders and managing senior professionals in complex, matrixed environments.
Deep understanding of technology resiliency, operational resilience, disaster recovery, third party, incident management, technology operations, and related risk and control frameworks.
Strong executive presence and experience preparing and delivering materials for senior management, Board, regulator, and audit audiences.
Proven ability to influence, partner, and drive consensus across technology, business, risk, control, and corporate function stakeholders.
Seasoned, professional leadership style with strong judgment, maturity, credibility, and the ability to operate effectively as part of a cohesive leadership team.
Demonstrated ability to lead teams through ambiguity, prioritize work, manage competing demands, and deliver high-quality outcomes with accountability and transparency.
Experience with risk assessments, control assessments, issue management, remediation governance, metrics, KRIs, regulatory exams, and audit engagement.
Strong written and verbal communication skills, including the ability to synthesize complex technology risk topics into clear, concise, executive-ready messaging.
Strong preference for a recognized industry certification such as CRISC, CISA, CISM, CISSP, CBCP, ITIL, or similar.

Responsibilities

Serve as a senior front-line risk and control leader for technology resiliency, operational resilience, disaster recovery, third party, incident response, production stability, and related technology risk domains.
Lead leaders and build a high-performing team accountable for risk identification, control design, control execution, issue management, risk reporting, and sustainable remediation.
Partner with technology, resiliency, operations, independent risk, compliance, legal, audit, and business stakeholders to drive practical, risk-based outcomes and effective control ownership.
Apply front-line experience in the three lines model to clarify ownership, strengthen accountability, and ensure appropriate engagement with second- and third-line partners.
Oversee risk and control activities related to infrastructure resilience, application resilience, disaster recovery, business continuity dependencies, third-party technology resilience, incident management, and control testing outcomes.
Prepare executive-ready materials, regulatory responses, Board reporting, risk assessments, issue updates, and decision papers with clear messaging and appropriate escalation of risk themes.
Brief executive audiences, respond to challenge, and represent the front-line risk and control perspective in senior forums.
Drive consistency, transparency, and cohesiveness with the broader technology risk leadership team while maintaining enterprise partnerships.
Promote a strong risk culture through proactive communication, disciplined execution, issue ownership, and thoughtful challenge.
Perform other duties as assigned.