Associate Director IT Embedded Risk

offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role:

Being a member of the IT ERM team the Associate Director is primarily responsible for supporting and conducting targeted IT risk assessments as well as the analysis and remediation of risk items including policy deviations, risk acceptances, issues and actions.

The incumbent will implement and support day-to-day IT risk management activities (such as risk and controls assessments), handle deadlines and collaborator expectations, and lead or participate in projects within assigned areas of responsibility.

In carrying these responsibilities, the incumbent must work collaboratively with the IT Risk Management team (including Management Control Testing and Center of Excellence functions), other risk & control functions (e.g., Internal Audit, Technology Risk Management), as well as with IT line management (1 st line).

Your Primary Responsibilities:

• Support efforts to identify and manage risk within SIFMU and RISK Delivery (SIRI)

• Develop and strengthen relationships with IT partners and control evaluation functions across the 3 lines of defense.

• Develop, communicate and ensure adherence to department risk policies, procedures and standard processes;

• Demonstrate and embed the behaviors and competencies that create a risk management approach in your organization;

• Lead risk management activities including review of policy and procedure documents for alignment with controls and for technical completeness and accuracy.

• Collaborating and/or leading assessments of key technologies within AES (e.g., Middleware, API, platform security)

• Gathering, preparing, and reviewing inputs into reporting (e.g., risk treatment, risk profiles, inherent risk assessments)

• Analysis and of compliance items (especially policy deviations, risk acceptances, issues/actions) included on the IT Risk & Control Report/ Dashboard

• Issue and action closure facilitation including meeting coordination, evidence gathering and review, documentation preparation and review

• Control evaluations performed by audit and/or management control testing functions as well as regulatory exams to gather, review, and prepare required evidence

• Acting as a technical authority on applications and technologies applied by DTCC

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

Qualifications:

• Minimum of 8 years of related experience

• Bachelor's degree preferred or equivalent experience.

Talents Needed for Success:

• Experience in system development, analysis, and/or technical auditing/ examination

• Leading technical discussions with key collaborators and staff to analyze vulnerabilities, remediation plans, and assess risk

• Solid understanding and working knowledge of technologies including Middleware technologies (CICS), APIs (Apigee),

• Solid understanding of architectural concepts including security architecture, governance, performance, resiliency, operability

• Exposure to risk and control concepts including process flows, risk and control identification, control evaluation and reporting is a plus

• Exposure in working with cloud platforms including cloud security and usage of native services (e.g., AWS EC2)

• Background in financial services information technology or Big 4 technical advisory services a plus

• Excellent analytical and problem-solving skills

• Excellent verbal and written communication skills

• Strong technology background including understanding of Middleware technologies, APIs, architectural governance, design, security, and non-functional concepts,

• Demonstrated ability to work pro-actively with all levels of management and staff

• Highly motivated, diligent, self-starter, who can set priorities, take initiative and work both independently and proactively in a dynamic team environment;

• Ability to work under pressure, multitask and be flexible;

• Ability/willingness to meet bold deadlines and objectives;

• Excellent inter-personal skills with a highly developed customer service orientation, and ability to work effectively with all levels of internal staff, and external contacts;

• Strong planning and project management skills;

• Strong process mapping and data collection and analysis skills

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.