About the role
Team: Technology Risk and Controls: Issue Management
- Manage end-to-end Issue Management lifecycle, including issue identification, root-cause analysis, remediation planning, tracking, and closure across multiple CIO business units.
- Manage Risk & Control Self-Assessment (RCSA) activities by coordinating control owners, collecting evidence, and validating the design and operating effectiveness of key controls.
- Ensure organizational regulatory and audit readiness by aligning technology teams to compliance frameworks such as SOX, NYDFS, and internal CRBG policies.
- Partner with cross-functional teams (IT, Cybersecurity, Risk, Internal Audit, and Application Owners) to drive remediation of control deficiencies and strengthen internal control environment.
- Maintain risks, issues, remediations, and control documentation in Archer, ensuring accuracy, audit traceability, and closure evidence.
- Develop governance artifacts including project plans, status reports, remediation dashboards, executive summaries, and leadership reporting decks.
- Facilitate weekly risk and remediation meetings, capture decisions and action items, and drive accountability to meet regulatory deadlines.
- Implement standardized templates and automation within the CRBG platform, improving documentation quality and reducing manual reporting effort.
Detailed Duties and Responsibilities (Day-to-Day Tasks)
- Issue, Risk & Remediation Management
- Intake/Discuss all IT issues from requestors, analyze the risks and prepare documentation in Archer.
- Track all open remediation items and risks, confirm ownership, target dates, and priority status.
- Validate remediation evidence and request closure based on completion and compliance alignment.
- Maintain dashboards and rolled-up reporting of remediation status to leadership and audit committees.
- Risk & Control Self-Assessment (RCSA) / Compliance Framework Execution
- Configure risks, inherent risk ratings, control categories, assessment units, and assessors within the CRBG platform.
- Initiate RCSA cycles, coordinate self-assessment activities, and facilitate evidence collection with application and control owners.
- Analyze control design and effectiveness, identify control gaps or deficiencies, and document findings in the CRBG system.
- Audit & Regulatory Readiness
- Enable organizational readiness for regulatory frameworks including NYDFS, SOX, PCI-DSS, and internal/external audits.
- Review and validate compliance artifacts, technical evidence, and documentation submitted by stakeholders.
- Develop compliance overview documents and reusable templates for audit support across multiple business units.
- Performance Tracking, Documentation & Reporting
- Establish baseline KPIs and SLAs for the compliance program and track progress over time.
- Create and distribute weekly/monthly dashboards summarizing risk posture, deficiencies, remediation progress, and compliance status.
- Document meeting minutes, summarize action items and follow-ups, and maintain governance documentation repositories.
- Cross-Functional Coordination
- Work closely with onshore/offshore teams, application owners, technology leads, and compliance stakeholders.
- Coordinate with leadership on audit requirements, compliance deadlines, regulatory submissions, and program updates.
- Ensure timely completion of deliverables with clear expectation-setting and stakeholder communication.