IT Manager Control Testing/Reporting

• Responsible for performing and leading teams to perform Control Assessments (i.e. Testing) that evaluate the design and operating effectiveness of CNB’s first line Key Controls
• Champion a thorough understanding of CNB's Internal Controls Management Policy and Standards, control testing methodologies, and related regulatory and compliance standards, including but not limited to enterprise risk management, data governance, third party risk management, model risk management, business continuity, fraud risk management, and associated regulations, guidance, and regulatory expectations
• Support development of control testing frameworks and methodologies
• Develop robust and scalable testing modules, scripts, and other guides including testing approach and scoping/sampling for evaluating the effectiveness of CNB’s first line Key Controls to mitigate key risk exposures related to regulatory requirements and CNB risk policies and standards
• Conduct peer review of control evaluation work papers and results
• Exhibit high attention to detail and strategic thinking in analyzing, aggregating, and articulating the results/issues of control testing activities and value-add opportunities for improvement of Key Controls to CNB Senior Management and other stakeholders
• Contribute to the articulation of results/conclusions/memos of control testing activities and communicate to key stakeholders across CNB
• Enable development, implementation, and continuous improvement of technology, tools, and templates that support control testing and reporting activities
• Create and memorialize detailed control testing documentation and review commentary
• Assist with the validation and closure of control issues as identified through testing
• Maintain solid working relationships with 1LOD, 2LOD and internal audit
• Assists management with developing budget estimates and manage resources to the annual budget and test plan
• Supports a high-performance environment by fostering an inclusive work environment, mentoring/coaching staff members, and enabling opportunities for them achieve development goals
• Engages in supervisory duties, performance management, and hiring of direct reports
• Acts as brand ambassador of the CoE by developing solid working relationships across the organization as to facilitate communication and strategic partnerships
• Contribute to ad-hoc assignments and special projects

• Addendum for T-I Control Testing Function
• Add Basic Function:
• The 1LOD Manager Control Testing/Reporting keeps abreast of external cyber security trends, technologies and cyber risk management approaches, control hygiene of the environment, and often works with other teams on cyber risk-related initiatives to provide subject-matter recommendations and guidance to achieve a risk posture within the bank's overall risk appetite. Serves as an expert in own discipline or area of specialization.
• Add to Responsibilities:
• -Assess residual risk within subject specialty area (hosting, network, middle tier, end user, cloud, service management) to evaluate the design and effectiveness of security controls.
• Add to Work Experience:
• Minimum of 6 years' experience in IT risk management, IT Operations and Technology domain.
• Masters' degree in business, computer science or related field is preferred.

Must-Have*

• Bachelor's Degree Preferably in accounting, finance, business, social science or related field
• Minimum 7 years of experience in controls testing, internal audit, quality control roles, or other complimentary capacities, preferably within the financial services industry, a public accounting firm, or with a financial institutions regulator
• Minimum 5 years of management or supervisory experience
• Minimum 3 years of experience in the financial services industry

Skills and Knowledge

• Knowledge of FINRA, SEC, MSRB, FRBNY and OCC rules and regulations
• Masters' degree in business, computer science or related field is preferred.
• Experience with operating in a highly matrixed environment
• Excellent communication and presentations skills
• Demonstrated experience supporting and/or leading risk projects across multiple business lines offering a wide variety of financial services products and services
• Excellent analytical and complex problem-solving skills
• Knowledge of the financial services sector, particularly with the competitive dynamics and products in banking and risk management
• Strong project management skills
• Preferred Certifications: CPA - Certified Public Accountant, CIA - Certified Internal Auditor, CISA - Certified Information Systems Auditor, and CISSP - Certified Information Systems Security Professional