Senior Risk & Control Officer
*** Must be CISM certified ***
-Provide information risk guidance to the AM boutiques and interface with Information Risk Management (IRM) on behalf of the business areas.
-Collaborate with internal and external audit and control groups and the AM boutiques to drive the closure of information risk related audit issues.
-Develop and manage the Service Provider Management program within Asset Management
-Collaborate with the AM Information Risk Officers (IROs) to develop procedures to manage risk within the business areas
-Assist the AM IROs with the development of program/project plans for the business Information Risk Service Delivery Model (SDM)
-Support the Corporate SIRO on information risk matters related to IRM and technology based projects.
The Senior Risk and Control Officer should have experience within the Financial Services sector and be familiar with the operational aspects of the business area that they will support. This includes having a conceptual understanding of the specific risks that exist within a particular line of business and how these risks may be addressed.
The Senior Risk and Control Officer will provide the subject matter expertise to quantify information risk within the line of business and develop solutions to eliminate or mitigate risks. The individual must be able to work across the business areas, IT, Risk, Compliance, Legal and other support organizations to drive the information risk program elements. The Senior Risk and Control Officer must be able to communicate complex technology and information risk issues in a way that is understandable to their business area so that the business can make informed decisions regarding their risks
The Senior Risk and Control Officer will provide a centralized information risk management service to the AM businesses to assist the management of their information risks. This role will drive the remediation of reported risks to the BNYM Executive committee and those identified within the business areas through the BNYM Risk, Compliance and Audit functions.
The Senior Risk and Control Officer must be able to effectively communicate up and down the organization to business, technology and risk organizations. They must have the ability to make decisions, contribute to consensus building, manage a large virtual organization and balance the risks and controls with their business' objectives.
Leave a Reply
You must be logged in to post a comment.