Job DescriptionOur Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.
Pay and Benefits:
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
- DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).
The Impact you will have in this role:
Operational Risk and Resilience protects the firm's interests by fostering a consistent, enterprise-wide culture of risk awareness, effective risk management practices, and resilient business operations. The team sets and evolves the firm's operational and enterprise risk management frameworks, provides expert guidance on risk and control matters, and delivers actionable insights to senior management, risk committees, and the Board.
The Executive Director will play a senior leadership role in enhancing and operating DTCC's enterprise RCSA and operational risk framework. This leader will bring strong framework-principle knowledge across issues, events, incidents, control testing, risk assessments, and governance, with the ability to translate qualitative risk concepts into practical, consistent, and sustainable enterprise practices. The role requires a dynamic risk leader who can strengthen the current framework, evolve it in line with leading risk management practices, and drive consistent adoption across the firm.
Primary Responsibilities:
• As a member of the Operational Risk & Resilience (ORR) leadership team, provide strategic direction on enterprise and operational risk management approach to management and oversight of non-financial risks.
• Own and evolve the ORR frameworks, policies, standards and procedures
• Evaluate the current Product, Risk and Control (PRC) framework and lead enhancements across standards, methodology, taxonomy, assessment approach, control evaluation, issue identification, testing, reporting, and governance routines.
• Lead the continuous evolution of the enterprise RCSA framework, ensuring it remains consistent, scalable, risk-based, and aligned to evolving risk management practices and regulatory expectations. Incorporate quantitative metrics to drive dynamic updates and trigger-based activities.
• Establish and maintain a robust risk and governance framework that supports effective risk identification, assessment, mitigation, monitoring, reporting, and escalation in a practical and decision-useful manner across business areas and control functions.
• Partner across Risk, Technology, Operations, Compliance, Internal Audit, Legal, Finance, and other control functions to build strategic partnerships, align expectations, and strengthen enterprise risk and resilience practices.
• Respond to regulatory requests, exams, and audits; ensure policies, standards, and procedures align with applicable regulatory expectations and internal governance requirements.
• Present key risk metrics, framework enhancements, themes, issues, and recommendations to audiences at all levels, including senior management, risk committees, and external regulators as appropriate.
• Advance and articulate a long-term strategy for the team consistent with the corporate vision, ensuring departmental goals are tied to company strategic pillars and measurable outcomes.
• Continuously identify opportunities to improve framework effectiveness, process efficiency, reporting quality, and enterprise adoption of risk management practices.
• Influence stakeholders at all levels through presentations, working groups, senior forums, and cross-functional engagement; motivate teams and partners to execute complex work that strengthens enterprise risk management.
• Demonstrate sound judgment, adaptability, and decision-making in an environment of evolving regulatory expectations, changing risk management practices, and emerging technology-enabled risks.
• Establish a department culture of communication, trust, accountability, diversity, employee satisfaction, and employee growth and development.
• Lead a dedicated team of employees who can lead critical risk activities and manage strategic business functions. Drive talent, resource, and location strategies across teams and ensure team members are evaluated, recognized, and rewarded.
Qualifications:
• Minimum of 15 years of related experience in Enterprise Risk Management, Operational Risk Management, Non-Financial Risk, Operational Resilience, Risk Frameworks, or related risk and control disciplines at a large complex financial services firm, SIFI, bank, broker-dealer, clearing house, fintech, payments organization, or equivalent environment.
• Demonstrated experience owning, enhancing, or materially contributing to enterprise risk or operational risk frameworks, including RCSA, issues management, events/incidents, controls, testing, governance, and risk reporting.
• Strong understanding of framework principles and the ability to translate qualitative risk concepts into practical, repeatable, and enterprise-wide operating practices.
• Experience engaging with senior management, risk committees, regulators, Internal Audit, and control partners on risk framework, governance, remediation, or risk assessment matters.
• Bachelor's degree preferred or equivalent experience.
Talents Needed for Success:
• Strong enterprise and operational risk framework judgment, with the ability to evaluate whether frameworks are fit for purpose, consistently applied, and evolving with leading risk management practices.
• Experience with regulatory exams and regulatory, Board, and Executive-level communications.
• Ability to own and operate an enterprise RCSA framework, including methodology, governance, stakeholder adoption, reporting, and continuous improvement.
• Shapes the opinions of key decision-makers and senior leaders by presenting persuasive arguments, alternative approaches, and practical recommendations.
• Strong qualitative risk judgment, with the ablity to move beyond theoretical risk concepts and convert them into practical standards, decision-useful insights, and sustainable execution routines.
• Prior direct experience or frequent collaboration with IT, Technology Risk Management, Operations, Compliance, Internal Audit, and other control functions.
• Sets a clear-sighted vision of the future to achieve the organization's desired market or business position; describes how the vision for the organization's future can be realized through tangible actions.
• Drives a culture of motivation and commitment to the vision, while creating accountability for measurable, high-quality, and cost-effective outcomes.
• Adapts presentation and communication style to fit the audience, including senior executives, risk committees, regulators, and cross-functional partners.
• Builds an organizational culture that embraces change as an opportunity rather than an obstacle; empowers and supports individual efforts to align with change initiatives.
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.
