Apply on Employer Site

Santander · 17 hours ago

Technology Risk, Governance & Controls Senior – Risk & Compliance (ODS)

SANTA BARBARA 1

Full-time

Onsite

Mid, Senior Level

4+ years exp

Santander's Open Digital Services is a software development company focused on creating innovative banking products. The Technology Risk, Governance & Controls Senior role involves defining and monitoring technology KPIs and KRIs, supporting technology teams in enhancing security and compliance, and ensuring informed decision-making for senior management.

BankingCommercial LendingFinanceFinancial ServicesPersonal Finance

Comp. & Benefits

Responsibilities

Management and monitoring of Technological and IT Risk indicators (KPIs/KRIs) across countries:

Definition and maintenance of KPIs/KRIs

Ongoing monitoring of indicator performance and analysis of deviations

Critical review of reported information and effective challenge to teams to ensure data quality and consistency

Identification of control weaknesses and relevant risks

Escalation of alerts and support in the definition and follow-up of action plans

Reporting to countries / subsidiaries:

Development of periodic reports of metrics and KPIs

Coordination with local teams for information gathering and validation

Ensuring homogeneous criteria and aligned messaging at Group level

Application management and inventory:

Maintenance of the application inventory

Technical review of applications according to their classification (criticality, confidentiality, RTO, RPO, data, etc)

Verification of compliance with required controls based on the application category (security, continuity, resilience, etc)

Gaps follow-up and remediation actions

Technological Risk management:

Identification, assessment and monitoring of technological risks

Support to IT areas in the definition of mitigation plans

Follow-up of action plans

Operational Risk:

Management of IT risks within the Bank’s internal Operational Risk framework

Support in the identification of changes, root causes and IT-related controls

Coordination with Operational Risk teams

IT control framework oversight:

Assessment of the adequacy and effectiveness of IT controls

Identification of gaps and areas for improvement

Follow-up of action plans and supporting evidence

Interaction with internal and external audit:

Support in internal and external IT / technology audits

Follow-up of findings and action plans

Governance and awareness:

Support in training and awareness initiatives

Promotion of IT control best practices

Continuous improvement and automation:

Proposal of improvements to control and reporting processes

Use of tools to automate indicators and reporting

Cross-functional coordination:

Coordination with IT, Security, Continuity, Data and Risk areas

Alignment with regulatory and corporate requirements

Qualification

Technology GovernanceRiskComplianceKPI/KRI ManagementStakeholder ManagementGovernance ModelsTechnology/Application InventoryAnalytical SkillsTeam CoordinationCommunication Skills