Director, Enterprise Risk

Responsibilities Finastra is recruiting for a Director, Enterprise Risk who will be responsible for all aspects of Risk Management, Regulatory Compliance, and Internal Audit for Finastra Business Units (BU). This important role will report directly to Finastra’s VP of Enterprise Risk Management and will act as a strategic partner to Finastra businesses, providing them with expert advice on risk and compliance matters.

This role will partner and collaborate with stakeholders across Finastra – including IT, Information Security, Enterprise Risk Management, Compliance, Audit as well as stakeholders within the Finastra Business units. This role will be the single point of accountability with complete oversight for risk identification and mitigation within the BU and will also develop and maintain key relationships with external regulatory bodies, including the Fed, the FDIC and the OCC.

Finastra is a rapidly growing private equity owned company that has evolved through a combination of organic growth and acquisitions. This rapid growth demands and requires the accountability and coordination to ensure sound risk management practices are top of mind, strategic and focused on execution of a strong plan. The role holder will be expected to have a breadth of experience and expertise across Risk, Compliance and Audit capabilities.

Essential Duties and Responsibilities
• Develop and implement a strategic, long-term risk management strategy and plan for the Business
• Identify, evaluate, and report on BU risks, practices and progress to senior leadership, governance committees and, as required, to external stakeholders
• Provide subject-matter expertise on risk management standards and best practices to meet Finastra's regulatory and compliance obligations
• Design and implement approaches, standards and processes designed to ensure that the BU’s risk management program complies with applicable laws, regulations, and contractual requirements
• Work with senior leaders within the BU to assess and communicate acceptable levels of risk
• Act as a champion for risk and compliance and foster a risk-aware culture and proactive risk management practices and behaviors
• Interact and collaborate with Internal Audit, Compliance, Cybersecurity, IT and BU colleagues and other internal and external stakeholders, such as external auditors, clients and regulators, as required
• Monitor the industry and external environment for emerging risks and advise relevant stakeholders on appropriate courses of action
• Conduct risk assessments for compliance with policies, standards, key controls, regulatory requirements – including analyzing risks, evaluating controls and identifying issues
• Validate exceptions including quantifying risks, investigating root causes, and working with owners to establish action plans
• Provide ongoing monitoring, tracking, and reporting of issues and remediation activities to senior leadership and governance committees Knowledge, Skills and Core Competencies
• At least 10 years’ experience developing or leading Enterprise Risk Management, Information Security, Audit, Compliance, Business Resilience, and/or IT Governance functions
• Proven experience in a financial institution / bank, fintech or a risk advisory firm providing advice to the financial services sector, or a financial services regulator
• Knowledge and experience with laws, regulations, guidelines, and frameworks within the financial services industry such as FFIEC, COSO, NIST, ISO and , GLBA, SOX
• Regulatory savvy having operated in a highly regulated environment and worked with compliance and audit to ensure a holistic risk management approach
• Experience in managing cybersecurity and IT risks, implementing strategies, and familiarity with current threat landscape
• Comfortable in working in a matrix organizational structure alongside functional colleagues and business stakeholders
• Excellent organization, presentation, project management, and written and oral communication skills to effectively communicate across a broad range of constituencies, including senior leadership
• Ability to engage and develop relationships with…