IT Risk & Security Leader: Enterprise Risk Manager

Northwest Bank; Columbus (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Northwest Bank is seeking an Information Technology Enterprise Risk Manager to join the Risk Management organization. The role focuses on supporting the execution and oversight of the bank's Operational Risk framework related to IT, information security, and data risks.

Responsibilities include overseeing RCSA activities, validating controls, and collaborating with IT, IS, and Data teams to mature risk assessments, document controls, and drive remediation actions.

Qualifications

• Bachelor's degree in MIS, Cybersecurity, or Business Administration.
• 8–12 years cybersecurity/IT experience and 6–8 years in financial institutions.
• Knowledge of regulatory standards: NIST CSF, GLBA, PCI DSS, HIPAA.
• Experience with vulnerability scanning and penetration testing tools.

Responsibilities

• Provide oversight of RCSA activities within technology processes and challenge conclusions.
• Assess risks independently and drive root-cause actions to reduce residual risk.
• Test IT/IS/Data controls to verify design and operating effectiveness.
• Support risk assessments and challenge methodologies and results (GLBA, HIPAA, PCI).
• Monitor remediation progress and ensure timely closure of issues.

Skills

IT risk management

RCSA

Vulnerability testing

Penetration testing

Communication & reporting

Education

Bachelor's degree in MIS/Cybersecurity/Business Administration

Job description

Northwest Bank is seeking an Information Technology Enterprise Risk Manager to join the Risk Management organization. The role focuses on supporting the execution and oversight of the bank's Operational Risk framework related to IT, information security, and data risks.

Responsibilities include overseeing RCSA activities, validating controls, and collaborating with IT, IS, and Data teams to mature risk assessments, document controls, and drive remediation actions.