Segment Risk Manager - Cybersecurity

0101 The Huntington National Bank; Easton (OH); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Huntington Bank is seeking a Segment Risk Manager to oversee operational and regulatory risk strategy for a business segment. The role focuses on Identity and Access Management, governance, and privileged access management, with strong emphasis on controls, risk assessments, and escalation to leadership.

Ideal candidates have 5+ years in risk, audit, or compliance within financial services and hold relevant security certifications.

Qualifications

• Bachelor’s degree required; 5+ years in Audit, Compliance, Risk Management or Operational Risk.
• ],
• job_responsibilities_description equivalence:[

Responsibilities

• Evaluate effectiveness of controls and escalate as appropriate.
• Lead risk identification and assessment across IAM domains including governance and administration.
• Support risk and control self-assessment, exception management, and governance groups.
• Provide advisory guidance on control design, cybersecurity standards, and regulatory maturity.
• Prepare executive reporting on risk health, issues, and control portfolio.
• Escalate timely issues to senior management and coordinate remediation with business segment management.

Skills

IAM processes

Cybersecurity governance

Risk management

Communication skills

Executive reporting

Education

Bachelor's degree

Tools

AWS

Azure

GCP

Job description

Description Summary: The Segment Risk Manager is responsible for oversight and administration of operational and regulatory risk strategy programs for a business segment. Duties & Responsibilities: Evaluate effective of controls and escalate as appropriate. Lead risk identification, assessment, and effective challenge across Identity and Access Management, with a focus on identity governance and administration, access lifecycle management, authentication and authorization, SSO/federation, and privileged access management, ensuring material risks and control gaps are appropriately identified, escalated, and managed. Manage the governance of issues through their lifecycle, from ideation to validation and subsequent closure Execute risk assessments against defined scopes and planned initiatives in alignment with our enterprise risk management frameworks Support and execute various processes such as Risk and Control Self-Assessment (RCSA), Exception Management, and assigned business governance groups Provide advisory and guidance on control design, cybersecurity standards/policies, metrics, and processes to help meet regulatory or maturity requirements Support executive reporting on the health and status of our risk, issues, and control portfolio Act as a trusted advisor to your customer, helping work through ambiguity and providing a risk perspective to new challenges or opportunities Deliver timely escalation of all issues requiring attention to senior management. Work with business segment management to ensure that the overall risk function is effectively supporting strategic goals. Collaborate with audit/business segment/corporate risk to address issues with plausible action plans and target dates. Must be aware of and keep abreast of credit risk associated with assigned business segment. Performs other duties as assigned.

Basic Qualifications:

• Bachelor’s degree Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk.
• In lieu of a Bachelor’s degree 4 additional years of segment-specific or risk related experience may be considered
• 3+ years of experience supporting Identity and Access Management (IAM) processes, procedures, and technologies, including identity governance, access management, authentication, authorization, and privileged access management.
• 2 years’ experience in cybersecurity or related domain
• 2 years’ experience in one or more cloud platforms AWS, Azure, GCP
• 2 years’ experience with deployment pipelines, DevOps, Containers, and API’s.
• 2 years’ experience with threat modeling
• 2 years’ experience with cybersecurity related policy, procedures, or standards governance
• 2 years’ experience with quantitative/qualitative risk assessments
• Excellent communication skills required to negotiate internally, often at a senior level.
• At least 7 years of experience within the financial services industry
• At least 4 years of experience working at a Category 3 or higher financial institution
• CISSP, CISM, CISA, GIAC, CIPP/US or other security/privacy certifications preferred but not required
• Organized, responsive, and highly thorough problem solver
• Demonstrable cyber risk knowledge based on working in real-world environments & situations.

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay) Yes

Workplace Type: Office Our Approach to Office Workplace Type Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Welcome to Huntington! At Huntington, we look out for people. From reinventing banking with game-changing innovations to building an internal culture that creates lifelong bonds, together, we can make people’s lives better. And amazing things happen when we look out for each other. We prove it every day. Whether it’s helping a colleague or collaborating on a new tool that will revolutionize the way people save money, our actions can have a huge impact. Our colleagues look out for people with a Can-Do Attitude, Service Heart and Forward Thinking. Those are our values—simple but powerful. Each of them pushes us do the right thing, to do right by people. Because people are what matter. If that sounds like you, we hope you’ll apply to join our team.

If you’d like to learn more about how Huntington looks out for people, visit https://www.huntington.com/lookingout

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of this site or if you require a reasonable accommodation to apply for a job or to perform the essential functions of the job, please send an email to [e-mail]

Reasonable Accommodations Reasonable Accommodations Various methods will be used throughout the recruitment process to verify candidate authenticity.

Any interviews conducted virtually must be joined from a distraction-free environment, with the candidate on camera and without the use of virtual backgrounds.