IT Risk Lead

  • Competitive
  • New York, NY, USA New York NY US
  • Permanent, Full time
  • Bank of America Corporation
  • 20 Jul 18 2018-07-20

IT Risk Lead

Job Description:

Provide analytical support in executing internal control discipline and operational excellence within a LOB/ECF. Gather and organize data in order to monitor and test the effectiveness of key controls and status of mitigation and action plans. Prepare documentation for the tracking, monitoring, and escalation of risk related issues to management. Acts as an ambassador of the risk culture. Incumbents typically have over 5+ years of risk management and/or LOB/ECF experience. May manage staff.

  • Partner with key Technology Managers to monitor and manage various risk programs across the firm
    • Proactively manage risk metrics - focus on "at risk" or "exceeding threshold risks" - work with technology management to address root causes and remediate as required
    • Support technology teams in supporting firm-wide risk programs (i.e., delivering requested artifacts, verify completeness / accuracy)
    • Partner with technology teams in the execution of Risk Control Self Assessments (RCSA)
    • Identify root causes of reported risks and partner to design remediation plans
  • Coordination with Technology Management in monitoring the execution, collection and completion of SOX control activities
  • Partner with Technology Management and internal audit to identify and report self-identified audit issues
  • Provide support to Technology Management on all phases of audit activities and ensure active engagement with technology management to meet audit objectives. In addition, assist management in the validation of preliminary audit issues and the creation of remediation plans
  • Partner with Technology Management in the execution of quality assurance programs - ensure completeness of data and identify and monitor required remediation activities
  • Manage, monitor and report standards-based compliance with the enterprise-wide Application Resiliency Program (ARP) which is a multi-year effort to drive improvements in recoverability and resiliency across the Bank's enterprise portfolio of applications
  • Deliver management dashboards and automated report distribution tools that track delivery of Risk and Controls milestones across the Bank's Fixed Income, Currencies and Commodities (FICC) portfolio of applications
  • Provide execution support for proper adherence to regulatory requirements from US and International regulatory bodies for large Banks, Broker-Dealers and Investment Management entities

  • 7-10 years Technology Audit or Technology Risk experience
  • Experience in the execution of Technology Risk Assessments, Audits and SOX 404 testing
  • Solid understanding of a risk control framework (i.e., inherent risks, control procedures, residual risk, etc.)
  • Ability to identify relevant key risk indicators to measure risk exposures (metrics reporting)
  • Strong ability to analyze data to identify thematic issues / areas requiring improvement
  • Ability to create executive level reporting
  • Excellent inter-personal, negotiation and influencing skills
  • Strong problem solving and analytical skills
  • Persistency, poise and perseverance to get things accomplished under pressure and within the set timelines
  • Interest and track record of ensuring accuracy, clarity and quality of work with attention to detail
  • Excellent MS-Office skills (including PowerPoint (for presentations) and Excel ( for manipulating large amounts of data)

1st shift (United States of America)

Hours Per Week: