IT Risk Principal

0101 The Huntington National Bank; United States; Hybrid; USD 93,000 - 189,000; Full time

Job summary

Huntington National Bank is seeking an IT Risk Principal to join the Independent IT Risk (2nd Line) function. This role leads governance, oversight, and remediation efforts across Technology and Operational risk, aligning with the Enterprise Risk Framework.

Responsibilities include delivering IT risk updates to the IT Risk Committee, conducting quarterly IT risk assessments, and mentoring colleagues while collaborating with front-line teams and risk units to drive risk-aware decision making.

Qualifications

• Bachelor's degree or equivalent.
• Five or more years of relevant technology experience supporting technology processes.
• Experience in Governance/Risk/Compliance/Audit preferred.
• ISACA CRISC/CISA/CISM or ISC2 CISSP/SSCP certifications preferred.
• Financial services industry experience preferred.

Responsibilities

• Lead IT risk governance and oversight across IT assets.
• Deliver IT risk assessments and remediation plans.
• Provide updates to IT Risk Committee and related forums.
• Mentor and develop colleagues in risk practices.

Skills

IT risk governance

Risk assessments

Stakeholder communication

Leadership

COBIT knowledge

ISACA CRISC/CISA/CISM

Education

Bachelor's degree in a related field

Tools

COBIT framework

Risk management framework

Job description

Description Summary

The IT Risk Principal is a member of Huntington’s Independent (2nd Line) IT Risk function. This 2nd line of defense role encompasses creation, improvement, and execution of Technology and Operational risk governance across the Bank, including partnership and oversight of front-line business and risk units, in alignment with the Enterprise Risk Framework. Primary responsibilities include the following with a focus on specific domain oversight:

Duties & Responsibilities:

• Management of processes to ensure credible challenge, oversight, and validation of IT risk findings/action plans/risk acceptances and 1st line risk and control assessments across the Bank
• Management and Oversight of assigned L2 risk(s) from our Risk Registry in alignment with our risk appetite
• Participation and Challenge within the IT Policies and Standards framework and processes to ensure output is aligned with risk appetite. This includes metrics, controls, process maps and other wholesale material for a healthy standard.
• Deliver periodic IT risk updates at governance meetings and active participation in the IT Risk Committee and associated sub-forums
• Deliver quarterly independent IT Risk Assessments and targeted assessments in order to form and support the Bank’s IT risk profile
• Providing Risk Management leadership across the Bank’s Information Technology, and Operational risks
• Assisting with determining the IT Risk Program's strategy and areas of focus
• Participation in our mentorship programs in alignment with our focus on colleague growth

Basic Qualifications:

• Bachelor's degree or equivalent level of work experience
• Five or more years relevant experience in a technology role, directly supporting technology processes or assets (applications/systems/etc.)

Preferred Qualifications:

• Previous experience serving in a Governance/Risk/Compliance/Audit function, ideally in a leadership role and with a large firm
• Effective advisory and collaboration skills, and ability to drive consensus
• Advanced understanding of the IT process’ (developing, delivering, supporting technology) and associated grasp of Technology Risks and Controls
• Logical and organized problem solver
• Effective written and verbal communication skills. Resource needs to be effective at understanding the technical side but also able to document their assessment (or other analysis items as needed).
• Critical/strategic thinker (able to look at something strategically and think risk, efficiency, cost, etc. – big picture ‘so what’ analysis and can execute what’s needed to help support the effort)
• Process oriented mindset and able to tell a story leveraging data
• Time management/organized/ability to prioritize
• Managerial courage and ability to effectively interact with various levels of leadership
• Performs other duties as assigned.
• Understanding of IT risk and control frameworks such as COBIT, etc.
• In-depth knowledge of risk management processes and principles, including experience assessing risks, analyzing testing results and developing remediation plans
• Strong preference for recognized industry certification such as ISACA CRISC/CISA/CISM, ISC2 CISSP/SSCP, or similar. Where these certifications are not possessed at the time of hire, the candidate will be expected to obtain certification within a 12-month period
• Experience working in the Financial Services industry
• KPI/KRI metrics and reporting experience
• Additional specialized qualifications may be required based on the specific position

#LI-OFFICE #LI-MK2

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Yes

Workplace Type: Office

Our Approach to Office Workplace Type Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Compensation Range: $93,000- $189,000 annual salary

The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education. Colleagues in this position are also eligible to participate in an applicable incentive compensation plan. In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO).

Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.

Welcome to Huntington! At Huntington, we look out for people. From reinventing banking with game-changing innovations to building an internal culture that creates lifelong bonds, together, we can make people’s lives better. And amazing things happen when we look out for each other. We prove it every day. Whether it’s helping a colleague or collaborating on a new tool that will revolutionize the way people save money, our actions can have a huge impact. Our colleagues look out for people with a Can-Do Attitude, Service Heart and Forward Thinking. Those are our values—simple but powerful. Each of them pushes us do the right thing, to do right by people. Because people are what matter. If that sounds like you, we hope you’ll apply to join our team. If you’d like to learn more about how Huntington looks out for people, visit https://www.huntington.com/lookingout

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of this site or if you require a reasonable accommodation to apply for a job or to perform the essential functions of the job, please send an email to [e-mail]

Reasonable Accommodations
Reasonable Accommodations
Various methods will be used throughout the recruitment process to verify candidate authenticity. Any interviews conducted virtually must be joined from a distraction-free environment, with the candidate on camera and without the use of virtual backgrounds.

EEOC Disclaimer Know Your Rights CA Data Privacy CA Data Privacy Rights Tobacco Disclaimer Tobacco-Free Hiring Practice Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.