Director, Risk Management: Cyber & Third Party Risk

What you'll do

• Lead the Third Party Risk team to manage vendor lifecycles through automation and process improvements.
• Partner with executive leadership across Cyber, Card, and Risk departments to deliver risk management solutions.
• Implement risk and control tools and frameworks in collaboration with second lines of defense.
• Make informed decisions regarding contracting risk, operational delivery, information security, and resilience.
• Analyze data extracts to identify trends and anomalies while escalating key risks and issues.
• Conduct risk assessments to ensure compliance with internal policies and external regulations.
• Identify, document, and track the resolution of risk events resulting from process breakdowns.
• Manage special projects and provide interdepartmental advisory on enterprise technology and cyber risks.

What we're looking for

• Bachelor's Degree or Military Experience.
• At least 9 years of experience in technology, cybersecurity, auditing, risk management, or related fields.
• At least 7 years of experience working in risk management.
• At least 5 years of experience in third party risk management, including vendor risk and control assessment programs.
• At least 5 years of experience in people management.
• Master's Degree (preferred).
• 10+ years of experience in information technology management (preferred).
• 8+ years of experience in third party risk management (preferred).
• Certifications such as CISSP, CISM, CISA, PMP, Lean, Agile, or Six Sigma (preferred).
• 5+ years of experience in Banking and/or Financial Services (preferred).
• 5+ years of experience evaluating, implementing, or managing cyber or information security (preferred).