IT Risk ManagementLocation: Stamford CTOnsite positionDuration: 12 monthsAs a senior team member in the Information Technology Risk department within Webster Technology, the incumbent will support the design, implementation, and lead elements of execution of risk functions for Webster Technology.These functions include Sarbanes Oxley (SOX) Processes, Assessments, risk item resolution or acceptance tracking, and risk awareness and training.Information Risk and Control FrameworkAssist in the design, implementation, and execution of the Risk Management framework processes within Webster Technology.In collaboration with IT process owners, lead the day-to-day activities supporting identification of material risks associated with Webster Technology activitiesConsult and guide technology and process owners with the establishment of necessary operating procedures and technical standards to mitigate these risks and comply with policies and standards.Assist in assessing control design, self-assessment processes (RCSA), control testing, and identifying KPIs and KRIs. Support the maintenance of the overall Webster Technology process taxonomy.Participate in the integration with the selected CIO Group GRC platform as needed.Take a leading role in increasing risk awareness throughout the organization.Information Risk Aggregation and ReportingContribute to the implementation and execution of integrated and automated Webster Technology risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required. Contribute to the development of reports through appropriate committeesRegulatory (Including Sarbanes Oxley (SOX))In collaboration with the second line, monitor for new regulatory guidance associated with Webster Technology activities.In collaboration with the second line, monitor for new activities, processes or technologies and assess potential risk impactSupport regulatory exams in Webster Technology.
Ensure process owners maintain appropriate documentation such that Webster Technology is always exam ready.Collaborate with enterprise risk management and legal to document management responses to regulatory exam findings.Design and execute control testing programs to support compliance efforts as assigned