VP, IT & IS Oversight

Wintrust Financial Corporation•Rosemont, IL

1d•Hybrid

About The Position

The VP IT & IS Oversight is a second line of defense leader responsible for independent oversight of IT and information security activities, reporting directly to the SVP, IT and IS Risk Oversight. This role works closely with the Technology and Information Security Organizations to ensure that policies, standards, metrics, risk assessments, and reporting meet best practice and regulatory expectations within the Company's Enterprise Risk Management framework.

Requirements

5-10 years of professional experience in IT/IS, Risk Management, Risk Advisory/IT Consulting, or IT Audit
Strong knowledge of IT including infrastructure management, applications development, data management and IT architecture
Strong understanding of IT risk assessments and control reviews
Strong understanding of Risk Management principles and concepts, including risk data aggregation, risk reporting and KRI management
Excellent interpersonal skills and experience interacting with Executive Management

Nice To Haves

Financial Services experience is desired
CISA, CISSP, CISM, CBCP or CIA certification is desired

Responsibilities

Participate as an independent risk management representative in IT and IS Risk Management Governance Committees, projects, initiatives, and/or working groups.
Assess IT risk issues and IT risk posture of front-line units and collaborate with IT and IS teams to ensure completeness and strength of policies, risk registers, and improvement plans and maintain awareness of emerging IT and IS risks for consideration in planning activities.
Support maintenance of IT and IS Risk Registers, controls, and issues within the organization's governance, risk, and compliance (GRC) system.
Design and operationalize risk data aggregation capabilities that meet BCBS239 standards for accuracy, integrity, completeness, timeliness, and adaptability of risk data.
Develop networks of contacts and risk champions within IT and IS teams and promote a culture of risk awareness and management across IT and IS organizations.