Summary:

The IT Risk Director, Resiliency & Business Continuity is responsible for leading the First Line Resiliency and Business Continuity Program across assigned business segments. This role establishes the strategic vision, governance, and execution framework for resiliency capabilities that enable the organization to prepare for, respond to, recover from, and adapt to operational disruptions. The IT Risk Director provides leadership, effective challenge, and partnership to business leaders, risk partners, technology teams, and support functions to ensure resilience risks are identified, assessed, mitigated, and monitored in alignment with enterprise standards and regulatory expectations.

Duties and Responsibilities:

• Provide independent review and challenge of business continuity and resiliency activities performed by business units.
• Facilitate completion of Business Impact Analyses, continuity plans, and resiliency assessments.
• Monitor adherence to enterprise resiliency policies, standards, and risk appetite requirements.
• Aggregate and report resiliency risks, issues, metrics, and control effectiveness to senior management.
• Provide consultation and guidance regarding resiliency requirements and regulatory expectations.
• Track remediation activities and validate closure of identified resiliency gaps.
• Escalate material resiliency risks, control weaknesses, and testing failures to appropriate governance forums.  
• Provide subject matter expertise and support during audits, examinations, and issue remediation activities.
• Lead a high-performing team responsible for business continuity, resiliency, crisis management, and recovery planning activities.
• Provide leadership and oversight for Business Impact Analyses (BIAs), continuity plans, recovery strategies, scenario testing, and resiliency assessments.
• Partner with senior business leaders to identify critical business services, supporting processes, dependencies, and recovery requirements.
• Oversee the development and execution of continuity and resiliency testing programs, including targeted risk assessments, tabletop exercises and recovery validation activities.
• Drive continuous improvement of resiliency capabilities through analysis of testing results, events, incidents, and industry best practices.
• Monitor resiliency-related metrics, key risk indicators, control performance, and remediation activities to ensure risks remain within established appetite.
• Represent the First Line Risk & Controls organization in enterprise governance committees, regulatory examinations, audits, and executive forums.
• Provide leadership during disruption events and support crisis management activities as required.
• Foster strong collaboration with Enterprise Risk Management, Technology, Information Security, Facilities, Third-Party Risk, and other risk disciplines.
• Ensure compliance with applicable regulatory requirements, policies, standards, and procedures related to operational resilience and business continuity.
• Perform other duties as assigned.

Basic Qualifications:

• Bachelor's degree or equivalent level of work experience
• 10+ years in a related role

Preferred Qualifications:

• 5+ years of leadership experience managing teams and enterprise-wide programs.
• Advanced knowledge of operational resilience, business continuity, crisis management, and risk management frameworks.
• Demonstrated experience developing and leading large-scale resiliency programs within a complex financial services environment.
• Strong executive presence with the ability to influence senior leadership and drive strategic decisions.
• Excellent communication, presentation, and stakeholder management skills.
• Experience leading regulatory examinations, audits, and issue remediation activities.
• Proven ability to manage multiple priorities and drive results in a fast-paced environment.
• Strong analytical, problem-solving, and strategic planning capabilities.
• Experience with business continuity and resiliency technologies, tools, and reporting platforms.
• Industry certifications such as CBCP, MBCP, CRISC, CISA, CISM, CISSP, PMP, or similar.
• Knowledge of regulatory expectations related to operational resilience, business continuity, and third-party risk management.

Exempt Status: (Yes= not eligible for overtime pay) (No = eligible for overtime pay)

Workplace Type:

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.