Talent.com
Information Technology Risk 1LoD lead
Information Technology Risk 1LoD leadNatixis NY Branch • New York, NY, US
Information Technology Risk 1LoD lead

Information Technology Risk 1LoD lead

Natixis NY Branch • New York, NY, US
job_description.job_card.variable_days_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

We are seeking a highly skilled and experienced Director of Technology Risk LoD1 and Software Asset Management lead to play a critical role in safeguarding Natixis CIB Americas IT and ensuring compliance with industry regulations.

This executive role is vital for ensuring the security and compliance of our Natixis CIB Americas IT, managing software assets effectively, and mitigating risks associated with information technology operations.

The successful candidate will possess a deep understanding of IT risk frameworks, software licensing agreements, and industry best practices. You will be responsible for implementing the Group IT Risk Management (ITRM) Framework, tailoring it to meet specific business or geographical needs, and leading initiatives to assess and enhance IT risk controls for Natixis CIB Americas platform in coordination with the overall IT department.

Leadership and Strategy :

  • Strengthen the IT risk management strategy in alignment with Head Office (BPCE Group and Natixis CIB), organization's goals and compliance requirements.
  • Lead the Software Asset Management (SAM) program, including process optimization, governance frameworks and contributing to the associated policy managed at LoD2.
  • Participate and / or conduct regular risk assessments, vulnerability assessments, and audits to identify potential IT risks and recommend appropriate controls and mitigations.
  • Oversee and assist the identification, analysis, and prioritization of risks associated with IT systems, software applications, and third-party vendors.

Procedure and Runbook Development :

  • Establish and maintain IT risk management procedures and any associated runbook in accordance with industry regulations and best practices.
  • Ensure software asset management procedures and runbooks are effectively communicated and enforced across the organization.
  • Software Asset Management (SAM) :

  • Oversee the lifecycle of software assets from acquisition to retirement, ensuring compliance with licensing agreements and optimizing software usage with alignment with Head Office processes.
  • Conduct daily health checks and completeness checks for all software assets in the IT Asset Management (ITAM) system.
  • Coordination and Collaboration :

  • Coordinate the ITAM Annual Recertification process to ensure ongoing compliance and accuracy of software assets with the IT asset owners.
  • Liaise with relevant stakeholders to facilitate IT controls review and reporting, ensuring all controls are met and documented.
  • Participate on ITAM tool feature enhancements to improve functionality and ensure it meets organizational needs, especially around SAM area.
  • Manage enhancement requests for the ITAM tool, working with IT teams to prioritize and implement improvements.
  • Monitoring and Reporting :

  • Perform random sampling of the End-of-Life (EOL) remediation tracking PowerApp to ensure compliance and effectiveness.
  • Prepare risk and controls reporting, including controls, Data Risk Strategy (DRS), and operational risk reports for senior management.
  • Submit risk acceptances for CIO Office needs, ensuring proper documentation and justification for any exceptions.
  • Security and Compliance :

  • Coordinate the implementation and knowledge transfer related to Multi-Factor Authentication (MFA) for appropriate applications to enhance security measures.
  • Oversee ITAM controls operations to ensure adherence to established policies and procedures.
  • Training and Awareness :

  • Develop and implement training programs to educate employees on IT risk management practices and software licensing compliance.
  • Foster a culture of accountability and awareness around IT risk and asset management within the organization.
  • Stay current with industry trends, regulations, and emerging technologies related to IT risk management and software asset management.
  • Drive continuous improvement initiatives to enhance risk management processes and software asset utilization.
  • Natixis is an equal opportunity employer, committed to a workplace free of discrimination. Natixis will not tolerate any form of discrimination based on age, color, mental or physical handicap or disability, pregnancy, marital status, sexual orientation, national origin, alienage, ancestry or citizenship status, race, religion, sex (including sex stereotyping, gender identity, gender expression or transgender status), veteran status, creed, genetic information or carrier status, or any other protected characteristic as established by law.

    Respect for all means that we deal with each person as an individual and not as a member of any group. All qualified applicants will receive consideration for employment. Management is expected to provide leadership in supporting the firm's EEO program by taking steps to promote EEO in all facets of employment including recruitment, hiring, retention, promotion, performance assessment, and career-development opportunities.

    The salary range for this position will be for a Director between $185,000 - $205,000. Natixis is required by law to include a reasonable estimate of the compensation range for this role. Actual base salary will vary and will be based on several factors including, but not limited to, relevant experience, education, skills set, applicable licensure and certifications, and other business and organizational needs. Base salary is only one component of our total rewards package. Natixis also offers a generous benefits package, and you may be eligible for a discretionary incentive award depending on company and individual performance.

    Requirements :

  • Bachelor's degree in a related field
  • 10+ years of IT experience specializing in risk management and software asset management, with a history of progressive leadership
  • Extensive knowledge of IT risk frameworks (NIST, ISO 27001, FFIEC) and software licensing for compliance and asset management
  • Relevant certifications (e.g., CRISC, CDPSE, CSAM) preferred
  • Experience in regulated environments, adhering to compliance frameworks for banking regulators (FFIEC, Federal Reserve)
  • Expertise in Risk Management and Regulatory Compliance
  • Familiarity with internal and external audits and remediation processes
  • Skills in process improvement and organizational change
  • Proficient in expense review and resource optimization
  • Knowledge of Cloud technologies, particularly SaaS
  • Experience in program and project management for timely delivery
  • Understanding of vendor management, third-party governance, and architecture governance aligned with business strategy
  • J-18808-Ljbffr

    serp_jobs.job_alerts.create_a_job

    Information Technology • New York, NY, US

    Job_description.internal_linking.related_jobs
    Information Technology Team Lead

    Information Technology Team Lead

    F. Schumacher & Co. • New York, NY, US
    serp_jobs.job_card.full_time
    Get AI-powered advice on this job and more exclusive features.Direct message the job poster from F.At FS&CO, we believe design transforms lives. We don't just create design—we champion it.Across...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Information Security Manager

    Information Security Manager

    VirtualVocations • Yonkers, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for an Information Security Manager to oversee security operations and ensure compliance with federal standards. Key Responsibilities : Develop and implement security policies,...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Field Chief Information Security Officer

    Field Chief Information Security Officer

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Field CISO to serve as a trusted advisor to clients in navigating cybersecurity challenges.Key Responsibilities Act as a virtual CISO for key clients, providing executi...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    AD, Health Information Technology (Georgia) - REMOTE

    AD, Health Information Technology (Georgia) - REMOTE

    Novartis Group Companies • East Hanover, NJ, United States
    serp_jobs.filters.remote
    serp_jobs.job_card.full_time
    The Associate Director, Health Information Technology (ADHIT) will proactively lead strategic initiatives and engage with key customers, primarily US health systems and provider groups, as a techni...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior Manager, Information Security

    Senior Manager, Information Security

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    Manager, Information Security Risk Management.Key Responsibilities Lead the supplier governance program and oversee supplier due diligence processes Partner with stakeholders for supplier sourci...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Technology Vendor Management Manager

    Technology Vendor Management Manager

    VirtualVocations • Flushing, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Manager, Technology Vendor Management.Key Responsibilities Support the vision and mission of the IT Vendor Management Office (VMO) Manage compliance of technology purc...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Director, Technology Risk- Enterprise Services Risk

    Director, Technology Risk- Enterprise Services Risk

    Capital One • NEW YORK, New York, United States
    serp_jobs.job_card.full_time +1
    Director, Technology Risk- Enterprise Services Risk.Director, Technology Risk- Enterprise Services Risk.The Enterprise Services Risk organization is expanding with a focus on attracting innovative,...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    VP- Technology Information Risk Management - NYC / Florham Park, NJ

    VP- Technology Information Risk Management - NYC / Florham Park, NJ

    Staffing • New York, NY, US
    serp_jobs.job_card.full_time
    VP Technology Information Risk Management.Location : Ideal 2-3 days hybrid in NYC office Duration : Full Time Location Options : Open to a combo of Melville, NY (Long Island) with one day in NYC (init...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Technology Risk Senior Specialist

    Technology Risk Senior Specialist

    The Hartford • New York, NY, US
    serp_jobs.job_card.full_time
    Information Security Senior Specialist - IS07EE.We're determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies.Working here means having...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cybersecurity Lead

    Cybersecurity Lead

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity Lead to manage and enforce cybersecurity posture, compliance, and continuous monitoring for a cloud-based enterprise environment supporting Department of De...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior Cybersecurity Project Manager

    Senior Cybersecurity Project Manager

    VirtualVocations • Flushing, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Senior Cybersecurity Project Manager, responsible for managing technical cybersecurity projects. Key Responsibilities Manage projects with internal and external dependen...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Lead - Technology Risk Controls (Remediation)

    Lead - Technology Risk Controls (Remediation)

    Corebridge Financial • Jersey City, NJ, US
    serp_jobs.job_card.full_time
    Lead - Technology Risk Controls (Remediation).The Information Technology organization is the technological foundation of our business and works in collaboration with our partners from across the co...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cybersecurity Director

    Cybersecurity Director

    VirtualVocations • New York, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Director of IT Cybersecurity.Key Responsibilities Develop and lead a comprehensive cybersecurity strategy aligned with business objectives Oversee risk management proc...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    IT Infrastructure Team Lead

    IT Infrastructure Team Lead

    VirtualVocations • Flushing, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for an IT Infrastructure Team Lead.Key Responsibilities Lead and manage the IT Infrastructure Team Monitor daily operations to ensure timely resolution of IT incidents and s...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Director of Governance Risk Compliance

    Director of Governance Risk Compliance

    VirtualVocations • Bronx, New York, United States
    serp_jobs.job_card.full_time
    A company is looking for a Director of Governance, Risk, and Compliance (GRC).Key Responsibilities Develop and direct an enterprise-wide GRC program to support growth and security Lead and manag...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    VP IT Security and Risk Management (Hybrid)

    VP IT Security and Risk Management (Hybrid)

    Selective Insurance • Millburn, NJ, United States
    serp_jobs.job_card.temporary
    At Selective, we don't just insure uniquely, we employ uniqueness.Selective's unique position as both a leading insurance group and an employer of choice is recognized in a wide variety of awards a...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    IT Compliance Lead

    IT Compliance Lead

    VirtualVocations • Paterson, New Jersey, United States
    serp_jobs.job_card.full_time
    A company is looking for an IT Compliance Lead to enhance its IT control environment and compliance posture.Key Responsibilities Own and maintain the Common Control Set in alignment with SOX ITGC...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Lead CT Tech

    Lead CT Tech

    Hackensack Meridian Mountainside Medical Center • Montclair, NJ, United States
    serp_jobs.job_card.full_time
    Join our team as an evening shift, full-time, Cat Scan-A Lead CT Technician in Montclair, NJ.You may be eligible for a sign on bonus of up to $10,000. Thrive in a People-First Environment and Make H...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted