This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Vice President, Information Technology and Cyber Risk Management (ITCRM) position is an individual contributor role within Credit Agricole’s Risk Division with 2nd Line of Defence oversight responsibilities across all business lines and activities of Credit Agricole’s Combined U.S. Operations (CUSO) for Information and Communications Technology (ICT) Risk, which includes IT Risk, Cyber Risk, and Operational Resiliency Risk.
Job Responsibility:
Oversee and provide effective challenge of First Line of Defence implementation of enterprise and operational risk management frameworks for ICT Risks
Monitor Key Risk, Key Performance, and Key Control Indicators for Information and Communications Technology across all business units, aggregate reporting to Risk Committees and escalate any breaches of established tolerances and thresholds
Support regulatory exams by preparing materials, responding to regulatory inquiries, and presenting on continuous monitoring sessions to regulators
Perform analysis on quarterly reports from various US operations and create a consolidated quarterly risk reports to be presented at various risk committees on ICT Risk
Manage issues across the issue management lifecycle
Monitor regulatory rule changes and conduct training and awareness sessions as needed to business leaders across the 1st line
Collaborate with other Risk Management functions to identify top and emerging risks to ensure appropriate visibility of the evolving landscape within Information and Communications Technology
Requirements:
College Degree BA/BS
5+ years of experience with oversight responsibilities in Operational Risk, Information Technology, Cybersecurity and/or Operational Resilience within a 2nd Line of Defence function such as Risk Management or Compliance OR 8-15 years of experience in risk related functions such as 1st line Governance Risk, and Compliance (GRC) or 3rd Line Internal Audit functions focused on Information Technology, Cyber Security, and/or Operational Resilience
Certified in Risk and Information Systems Control (CRISC)
Regulatory experience
Detailed Oriented, articulate and possessing good communication skills
Excellent Analytical Skills
Resourceful in identifying, following up and resolving issues
Strong team spirit and work ethic
Strong written and verbal communication skills
Ability to collaborate across the organization and manages relationships
Strong Risk Management knowledge is required including working knowledge of Enterprise Risk Management, Operational Risk Management, and familiarity with Third Party Risk Management
Knowledge of technology environments and processes is also required
Nice to have:
College Degree BA/BS in Management Information Systems (MIS), Information Technology, or Cybersecurity
Prior experience in a US Large or Foreign Banking Organisation (LFBO)
Experience in evaluating and implementing US regulatory requirements
Experience with or at a state or federal agency
Leadership ability, able to drive action within the organization
Ability to manage up
Ability to manage horizontally across multiple businesses and risk disciplines
Project Management skills
Audit/Testing knowledge
Additional certifications in CISA, CISM, CBCP, and/or CISSP are a plus
Familiarity with the Federal Financial Institutions Examination Council (FFIEC) booklets with the ability to assess against them
Additional knowledge of NIST 800-53, NIST CSF, CRI, ISO27001, COBIT, and/or CIS frameworks are a plus