Join a role that's central to our technological resilience, offering a unique opportunity to shape the firm's tech risk strategy and enhance industry compliance.
As a Tech Risk & Controls Director within the Consumer & Community Banking Technology - Tech & Risk Controls you will lead the strategic development and implementation of technology risk management and enterprise-grade technology asset governance across the Consumer Banking Technology estate. You will be accountable for the end-to-end ITAM strategy, operating model, and execution—providing explicit oversight of Tech Operations, Tech Maintenance, and Tech Lifecycle Management.
This role ensures technology assets (hardware, software, and in-scope virtual/cloud resources) are inventoried, compliant, resilient, cost-optimized, and lifecycle-managed to support consumer banking outcomes at scale. Success requires disciplined controls, strong cross-functional leadership, and measurable improvements in availability, risk posture, audit readiness, and total cost of ownership (TCO).
Job Responsibilities
- Own ITAM strategy and operating model for CCB Technology, ensuring a complete, accurate, and auditable inventory of in-scope assets and relationships (configuration, ownership, location, usage, entitlement), inclusive of Tech Ops, Tech Maintenance, and Tech Lifecycle Management
- Establish and drive adoption of enterprise standards for asset onboarding, normalization, tagging, reconciliation, and lifecycle state management across engineering and operations teams
- Lead software licensing and entitlement management including consumption analytics, compliance/audit readiness, and remediation of gaps through durable process and tooling improvements
- Design, implement, and execute an ITAM controls framework that is audit-ready, including control objectives, evidence standards, governance cadence, issue management, and remediation discipline
- Develop and implement technology risk management strategies, policies, and processes to identify, assess, mitigate, and monitor risks aligned to firm standards, regulatory requirements, and industry best practices
- Identify and escalate emerging and upstream technology risks using firm management framework tools (e.g., risk event management, reporting, action plan tracking) and provide expert counsel to stakeholders on obligations and acceptable outcomes
- Partner closely with Cybersecurity, Architecture, Engineering, Finance, Procurement, Vendor Management, Risk, Compliance, and Audit to ensure alignment to firm standards and regulatory expectations
- Own executive-ready governance, reporting, metrics, and insights on control effectiveness, asset data quality, compliance posture, availability/stability, and economic outcomes
Required Qualifications, Capabilities, and Skills
- Senior leadership experience in technology asset management and technology operations within large-scale, regulated environments
- Sets reuse-first expectations for enterprise-authorized AI adoption within the work environment across technology risk and controls operations to accelerate evidence synthesis, issue analysis, and executive reporting, with human-in-the-loop validation and appropriate handling of sensitive data
- Deep knowledge of ITAM practices, software licensing/entitlement management, lifecycle governance, and operational service management disciplines
- Proven experience building controls, operating cadences, and audit-ready evidence with strong issue remediation discipline
- Demonstrated ability to deliver measurable outcomes across availability/stability, cost optimization (TCO), risk reduction, and operational efficiency
- Demonstrated experience leading safe adoption of enterprise-authorized AI capabilities within the work environment within technology risk and controls workflows, including validation practices and awareness of data sensitivity
- Ability to define review/approval and escalation expectations for AI-assisted recommendations while maintaining security, auditability, and regulatory compliance outcomes.
- Strong executive communication skills; ability to lead and influence cross-functional initiatives across engineering, infrastructure, and enterprise control partners
- 7+ years of experience (or equivalent expertise) in technology risk management, information security, or related fields, with a focus on risk identification, assessment, and mitigation
- Establishes governance standards for AI-assisted workflows used in risk reporting and issue/action-plan management, ensuring traceability/auditability and alignment to security, resiliency, and regulatory expectations
- Demonstrated expertise in risk management frameworks, industry standards, and regulatory requirements relevant to the financial industry
Preferred Qualifications, Capabilities, and Skills
- Proven ability to lead large teams, manage cross-functional projects, and translate technology insights into business-aligned strategy and decisions
- Advanced knowledge in data security, risk assessment & reporting, and control evaluation/design/governance, with a track record of implementing effective risk mitigation strategies
- Experience with enterprise-scale CMDB/asset ecosystems, discovery tooling, and software asset management (SAM) platforms
- Experience integrating asset intelligence with incident/problem/change processes and operating models
- Experience supporting technology modernization, platform standardization, and large-scale refresh/decommission programs