Managing Director, Information Risk Mgmt

If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer. 

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

Job Summary:

Design, implementation, and execution of the Information Technology and Enterprise risk management frameworks,  manage and/or support compliance with technology policies and standards, risk reporting, support and/or provide effective challenge for 1^st line risk activities (including RCSA, ERA, regulatory assessment programs, etc).

As a key leader in the Information Risk group, the incumbent will perform or lead any of the following information risk framework and assurance activities:

•  Information Risk and Control Framework – Provide effective review and challenge and/or design, implementation, and execution or of the Information Technology and Enterprise risk management frameworks, identify material technology risks and control objectives. Coach, review and challenge process control designs, self-assessments (RCSA), and control testing.
• Information Risk Aggregation and Reporting - Contribute to the design and implementation of integrated risk reporting processes to enable firm-wide aggregation of material risks, issues, KRIs and other data as may be required.
• Regulatory - In partnership with legal and compliance, monitor for new legal requirements and communicate across Webster Technology as required. Monitor progress toward implementation.  Support or review requirements for regulatory exams, and exam readiness.

General Requirements

• Strong risk management skills and minimum of 5 years' experience in an associated field such as Enterprise or Operational Risk, Internal Audit, or Information Security Risk Management
• Able to prepare for and present to Executive and Board-level audiences
• Ability to draft clear, concise, and precise policies, standards. technical standards, and procedures, as required.
• Familiarity with technology, and an aptitude for learning emerging technologies and how regulatory requirements may evolve.
• Ability to evaluate and assess a wide variety of risk activities, processes and controls (framework certification, regulatory maturity models such as the FFIEC CAT, etc.); experience testing controls in an assurance capacity
• Strong written and verbal communication skills -- ability to collaborate and communicate up/down and across the organization with internal/external partners.

#LI-JW1