Auburn Hills, MI, 48321, USA
9 hours ago
Manager, BRCO Third Party Risk - Cybersecurity
Job Description Manager, BRCO Third Party Risk The Business Risk and Control Officers (BRCO) play a pivotal role in guiding the business to identify and understand risk exposures and the controls needed which are integral to reducing risk and safeguarding our customers and colleagues. BRCOs are critical to the success of the Risk Management Lifecyle and play a role in Planning, Identifying, Assessing, Mitigating, Monitoring, and Reporting. BRCOs are members of the First Line of Defense (1LOD) who: Provide leadership and coaching to the 1LOD to proactively identify and effectively manage risks. Translate and educate 1LOD to enable and drive business relevant implementation of Second Line of Defense (2LOD) risk management frameworks, policies, taxonomies and inventories. Review, validate, and test 1LOD activities to ensure adequate control design and effective control operation. Provide credible challenge to 1LOD colleagues, ensuring safeguard and risk mitigation measures are upheld in decision making and adherence to 2LOD frameworks and policies prior to 2LOD review. Drive two-way collaboration across 1LOD and 2LOD; liaise between 1LOD and 2LOD to driveengagement throughout the risk management lifecycle. Collaborate and coordinate across the organization to help navigate and mitigate horizontal risk promoting resilience and ensuring safety and soundness. Document, aggregate and report risk in accordance with the risk management lifecycle. The Manager, BRCO Third-Party Risk for (Line of Business) will be responsible leading a team to partners with 1LOD to ensure adherence to supplier management and third-party risk policies and procedures. Understands the third parties we use, how we use them and what safeguards our third parties have in place. Drives the oversight and governance activities, as required by 2LOD, of third parties engaged for the line business. Position Responsibilities: Advises and guides 1LOD performing the Third-Party risk processes performed on new and existing Third-Parties using a risk-based approach for review requirements and frequency. Analyzes process elements include planning, due diligence and third-party selection, contract negotiation, ongoing monitoring, termination/off-boarding. Provides guidance and works with 1LOD to identify, measure, control, monitor, and report on Third-Party risks in accordance with corporate risk policies. Facilitates and executes Third-Party due diligence activities, including relevant risk assessments to ensure adherence to the enterprise Third Party Risk Management policy. Provides leadership and coaching to 1LOD to proactively identify and effectively manage risks. Translates and educates 1LOD to enable and drive business relevant implementation of Second Line of Defense (2LOD) risk management frameworks, policies, taxonomies and inventories. Drives two-way collaboration across 1LOD and 2LOD; liaise between 1LOD and 2LOD to drive engagement throughout the risk management lifecycle. Drives a strong enterprise risk culture by fostering rigor and discipline focused on risk and compliance awareness, ethical business practices, transparency and escalation. Learns continuously about the line of business to strengthen subject matter expertise and provide more valuable application of risk guidance. Collaborates with and supports other BRCO team members to ensure a robust and comprehensive implementation of 2LOD frameworks within 1LOD. Selects, motivate, and retain high performing talent, cultivating a spirit of teamwork and continuous improvement with shared goals and objectives. Supports the development and growth of direct reports through on-going direction, coaching and performance management. Manages expenses and budget associated with the team and the work managed Other duties as required Qualifications Position Qualifications: + Bachelor's degree from an accredited university or in lieu of a bachelor's degree a High School Diploma or GED and 6 years of Risk Management, Compliance, or Audit experience. + 8 years of experience in Risk Management, Compliance, Audit or related field + 8 years of experience in Third-Party Risk Management + 8 years of experience in advising, providing subject matter expertise, and credibly challenging colleagues in a risk and control environment + 8 years of experience in strong understanding of various risk types/pillars, risk management, controls, and compliance concepts and frameworks. + 6 years of experience with Project support / project management skills - ability to provide direction, track progress and ensure alignment with program requirements + Proficient in risk management software, MS Office Suite, and other related technology tools + Strongly preferred experience in managing or leading a team + Strongly preferred 6 years of experience in Financial Services industry and/or knowledge of (Line of Business) products, services and business processes + Preferred experience in developing and/or managing supplier contracts About Comerica We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure. Upon offer, Comerica conducts a comprehensive background and fingerprint check. Your fingerprints will be used to check the criminal history records of the FBI and may be subscribed in the FBI's Record of Arrest and Prosecution Background ("RAP Back") service, which provides ongoing notification to the Company of any updates to your criminal history. NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act. Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico. Comerica is proud to be an Equal Opportunity Employer-disability/veteran
Confirmar seu email: Enviar Email