IT Risk Project Manager Remediation

Position overview

Responsibilities

• Review requirements and findings and define remediation plans and deadlines with owners or implementation managers.
• Present remediation plans to senior management and obtain sponsor validation.
• Drive remediation delivery and update ITO management with status reports highlighting risks and issues.
• Meet stakeholders regularly and check and challenge IT/IS deliverables against validated requirements.
• Prepare final reports or submissions, confirm evidence is complete, and coordinate validation of remediation and deliverables.
• Prepare project closure, recap risks and the control framework, and communicate to management.
• Analyze external standards and practices, including FFIEC and NIST, to propose improvements to internal frameworks.
• Contribute to local standards and methodologies for CIB Americas IT and Cyber.

Qualifications and experience

• Bachelor's or Master's degree in Science or Engineering, ideally Computer Science.
• At least five years of recent experience in IT audit or IT/cyber risk and control/GRC.
• Professional working proficiency in English is required.
• Knowledge and experience in IT and cyber risk and controls, and familiarity with IT and information security practices in financial services.
• Familiarity with FFIEC IT Examination Guidelines and other major cyber and risk management frameworks.
• Experience managing high-end and strategic projects.
• CRISC, CISA, CIA, CISM, CISSP, or PMP certifications are valued.

Skills

• Strong verbal, written, and presentation skills for progress reports and proposals to senior stakeholders.
• Ability to coordinate multiple tasks and teams, work independently under pressure, and obtain buy-in across leaders and subject-matter experts.
• Tactical and strategic thinking, innovation, creativity, analytical ability, and attention to detail.
• Advanced knowledge of Microsoft Excel, PowerPoint, SharePoint, Power BI, and Power Automate.

Work arrangement

• Hybrid arrangements are available for most positions.
• In-office presence is required at least three days per week, including a Monday and/or Friday.

Benefits and development

• Benefits include insurance, a defined contribution pension plan, and paid volunteer days.
• Training, personal development, and career development opportunities are available.