Program Manager

Popular; San Juan (PR); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Popular is seeking a Program Manager in San Juan, PR to lead governance, risk and remediation initiatives for IT controls. You will drive SOX/ITGC governance, coordinate remediation across tech and business units, and partner with Internal Audit and third parties to ensure evidence readiness and compliance.

The role demands strong leadership, cross-functional collaboration, and clear governance reporting. You will oversee quality reviews, risk monitoring, and program leadership across multiple

Qualifications

• Bachelor's degree in Information Systems, CS, IT, cybersecurity, accounting, finance, business, risk management, or related field.
• Six+ years in technology risk management, IT audit, internal controls, info security, governance or compliance.
• Experience leading audit planning, control assessments, and remediation initiatives.
• Experience managing complex programs with multiple stakeholders.
• Financial services industry experience preferred.

Responsibilities

• Lead ITGC/SOX governance activities for the Information Technology Division.
• Direct evidence readiness and oversee collection, review, and validation of audit docs.
• Partner with Internal Audit, PwC, risk, compliance, and business stakeholders.
• Monitor compliance with service levels and control requirements.
• Identify, assess, and escalate risks, issues, and control challenges.
• Provide governance reporting and recommendations to leadership.
• Lead control remediation programs from audit findings and regulatory observations.
• Coordinate remediation across technology and business functions.
• Set priorities, monitor progress, drive accountability for issues.
• Facilitate discussions to align remediation strategies and ownership.
• Present remediation status to governance committees and leadership forums.
• Influence cross-functional teams to improve controls and reduce risk.
• Oversee ITGC and non-SOX quality review programs.
• Ensure consistent review methodology, documentation, and reporting.
• Validate findings, identify emerging risks, assess control effectiveness.
• Develop practical corrective action plans with management.
• Identify opportunities to enhance governance and monitoring.

Skills

Governance leadership

ITGC / SOX knowledge

Risk management

Remediation program management

Project leadership

Stakeholder management

Team supervision

GRC tooling

Education

Bachelor's Degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Finance, Business Administration, Risk Management, or a related field

Tools

GRC platforms

Remediation tracking

Audit documentation tools

Job description

Date: Sep 11, 2026

Location: San Juan-Cupey, PR

Company: Popular

Workplace Type: Hybrid

Program Manager

Essential Duties and Responsibilities

Governance and Control Leadership

• Lead the execution of the Bank's SOX and IT General Controls governance activities for Information Technology Division.
• Direct evidence readiness efforts and oversee the collection, review, and validation of audit documentation for the Information Technology Division.
• Partner with Internal Audit, PwC, Second Line Risk, Compliance, and business stakeholders to support governance objectives.
• Monitor compliance with established service levels and control requirements.
• Identify, assess, and **escalate** risks, issues, and systemic control challenges impacting compliance objectives.
• Provide governance reporting and recommendations to management and leadership teams.

Remediation Program Management

• Lead control remediation programs resulting from audit findings, regulatory observations, control gaps, and risk assessments.
• Coordinate remediation activities across technology and business functions.
• Establish priorities, monitor progress, and drive accountability for issue resolution.
• Facilitate discussions with stakeholders and leaders to align remediation strategies and ownership.
• Present remediation status, risks, and recommendations to governance committees and leadership forums.
• Influence cross-functional teams to achieve sustainable control improvements and risk reduction.

Quality Assurance and Risk Monitoring

• Oversee the execution of ITGC and non-SOX quality review programs.
• Ensure consistency in review methodology, documentation standards, and reporting practices.
• Validate findings, identify emerging risks, and assess control effectiveness.
• Collaborate with management to develop practical and sustainable corrective action plans.
• Identify opportunities to enhance operational processes, governance practices, and monitoring capabilities.

Program and Project Leadership

• Lead strategic initiatives and special projects related to controls, governance, compliance, and operational risk.
• Coordinate cross-functional efforts involving multiple divisions and stakeholders.
• Develop implementation plans, monitor execution, and ensure achievement of established objectives.
• Evaluate business impacts, dependencies, and risks associated with program deliverables.
• Provide recommendations that support enterprise risk management and operational effectiveness.
• Supervise, coach, and develop a team of risk and control professionals.
• Establish performance expectations, priorities, and development plans.
• Manage workload distribution and resource allocation.
• Foster employee growth through mentoring, training, and continuous feedback.
• Support succession planning and overall capability development within the Preventive Monitoring function.
• Serve as backup to the Manager I, as required.

Education

Bachelor's Degree in Information Systems, Computer Science, Information Technology, Cybersecurity, Accounting, Finance, Business Administration, Risk Management, or a related field.

Experience

• Minimum of six (6) years of relevant experience in Technology Risk Management, IT Audit, Internal Controls, Information Security, Compliance, Governance, or related disciplines.
• Experience leading audit planning, control assessments, and remediation initiatives.
• Experience managing complex projects or programs involving multiple stakeholders.
• Experience leading teams and influencing cross-functional decision-making.
• Financial services industry experience preferred.

Knowledge, Skills and Abilities

Knowledge of:

• IT General Controls (ITGC) and SOX compliance frameworks.
• Technology risk management principles and methodologies.
• Internal controls, audit processes, and regulatory expectations.
• Information technology and cybersecurity control environments.
• Governance, Risk, and Compliance (GRC) practices.
• Issue management and remediation lifecycle processes.

Ability to:

• Lead multiple initiatives simultaneously in a fast-paced environment.
• Influence decisions without direct authority across organizational boundaries.
• Build strong relationships with leaders, auditors, and business stakeholders.
• Analyze complex issues and develop practical solutions.
• Communicate effectively with executives and governance committees.
• Exercise sound judgment in risk-based decision-making.

Supervisory Responsibilities

• Directly supervises three (3) employees.
• Provides leadership, coaching, performance management, and professional development.
• May lead project teams and cross-functional workgroups across multiple divisions.

Systems and Tools

Experience working with Governance, Risk and Compliance (GRC) platforms and related technologies supporting:

• Issue management
• Remediation tracking
• Governance reporting

Important: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Our hybrid work model benefit applies to certain positions and is subject to changes based on the organizational needs.

If you have a disability or need more information about requesting an accommodation, please contact us at [e-mail]. This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.

ABOUT US

Popular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.

As employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.

We reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.

Job Segment: Program Manager, Compliance, QA, Law, Manager, Management, Legal, Quality