Senior IT Risk Manager: Lead Tech Risk & Compliance

Ent Credit Union; Colorado Springs (CO); On-site; USD 135,000 - 157,000; Full time

Benefits offered by this job

Generous 401(k) match

Health Insurance

Dental Insurance

Vision Insurance

Paid Vacation

Job summary

Ent Credit Union, formed by the merger with Wings Credit Union, seeks a Sr. Manager of IT Risk to lead a team in building and maintaining an enterprise-wide risk program.

You will ensure alignment with the Information Security Policy, manage RACMs, risk assessments, and focused controls testing, and collaborate with IT, security, and business leaders to embed a risk-aware culture. The role emphasizes regulatory compliance, audit readiness, and strengthening defenses against technology-related

Qualifications

• Bachelor’s degree in Risk/IT or related field required/preferred.
• 7+ years’ experience in IT Security, IT Risk, or information security.
• 2+ years’ team leadership or management experience.
• 5+ years’ financial industry experience preferred.

Responsibilities

• Lead the enterprise Technology Risk program and maintain the ISP alignment.
• Manage RACMs, risk assessments, and controls testing with business units.
• Draft and present RACMs for management review and approval.
• Develop risk dashboards for ERMC and the Board.
• Provide policy development support and ensure regulatory compliance.
• Coach and develop the technology risk team and coordinate cross-functional projects.

Skills

IT Risk

Regulatory compliance

Leadership

Communication

Risk governance

Cross-functional collaboration

Education

Bachelor’s Degree in IT/Security

Tools

Archer (GRC)

Job description

Ent Credit Union, formed by the merger with Wings Credit Union, seeks a Sr. Manager of IT Risk to lead a team in building and maintaining an enterprise-wide risk program.

You will ensure alignment with the Information Security Policy, manage RACMs, risk assessments, and focused controls testing, and collaborate with IT, security, and business leaders to embed a risk-aware culture. The role emphasizes regulatory compliance, audit readiness, and strengthening defenses against technology-related