CTO Head of Risk And Controls

Overview

In this senior role, you will own and elevate CTOi’s control environment, using proactive, data-based oversight to strengthen technology risk and control frameworks across information security, infrastructure, applications, and vendor management. You’ll represent CTOi in major risk and control forums and partner with senior technology and business leaders to close control gaps, improve reporting, and drive measurable control effectiveness in a highly regulated setting.

Responsibilities

• Own controls across CTOi and drive a proactive, data-driven controls management and transformation
• Represent CTOi in risk and control forums such as the Technology RCMM chaired by the GCIO
• Develop and maintain the technology risk and control framework aligned to risk strategy and regulatory requirements
• Establish policies and procedures for technology risk and control including disaster recovery, incident response, and security awareness training
• Identify and assess technology risks across information security, infrastructure, applications and vendor management
• Implement risk mitigation strategies and controls with technology teams and stakeholders
• Monitor and report control effectiveness and close deficiencies and gaps
• Coordinate with operational risk, compliance and internal audit for integrated risk management across CTOi

Key requirements

• Substantial experience building and running technology risk and control frameworks in a regulated environment
• Experience shaping policies for disaster recovery, incident response, and security and risk awareness
• Ability to identify and assess technology risks across information security, infrastructure, applications and third-party providers
• Track record delivering effective risk mitigation and measurable control improvements
• Experience monitoring control performance and reporting to senior governance forums
• Strong stakeholder partnership across technology and business leadership including executive-level forums
• Experience coordinating with second line risk functions, compliance and internal audit
• Experience managing budgets and resources for risk and control initiatives and working with vendors and partners

• strong stakeholder partnership
• collaboration with senior leadership
• communication with governance forums
• technology risk and control frameworks
• disaster recovery planning
• incident response

…