Description
Responsibilities include, but are not limited to:
- Function as a single point of contact for all aspects of enterprise IT policy governance, IT internal and external audits and engagements with regulators.
- Proactively identify potential risks within business operations, conduct risk assessments to understand the severity and likelihood of those risks, and document findings.
- Design and implement internal controls to mitigate identified risks, monitor the effectiveness of those controls, and take corrective actions when necessary.
- Promote adherence to relevant regulations, internal policies, and procedures within IT. Includes preparation for regulatory exams and facing off with regulators along with appropriate subject matter experts on staff.
- Collaborate with different teams within IT to understand their risk profile, provide guidance on risk management practices, and facilitate open communication about risks.
- Contribute to the development and maintenance of relevant risk management policies and procedures.
- Identify and escalate critical risks to appropriate levels of management when necessary.
- Custodian of Information Technology (IT) policy and process governance frameworks.
- Build, manage and mature best in class and comprehensive IT Controls framework spanning the entire IT organization.
- Regularly communicating risk information, IT governance initiatives, progress, and challenges to stakeholders at all levels of the organization.
- Identifying potential IT disruptions, analyzing their impact on business operations, and prioritizing mitigation strategies.
- Creating comprehensive IT resolution plans outlining steps for data backup, system restoration, communication protocols, and escalation procedures in case of major outages.
- Work with Valley Bank's Disaster Recovery team to regularly evaluate IT recovery plans through simulations and drills to promote effectiveness and identify areas for improvement.
- Maintaining detailed documentation of IT resolution plans, including system dependencies, critical data points, and contact information.
Apply on company website