The Technology Policy Manager will support information technology policy ownership, implementation, monitoring and compliance. The candidate will be primarily responsible for the following responsibilities.

Support the policy management lifecycle including change triggers, i.e. changes in environment, laws/rules/regs, audit/exam findings for development of new or changes to existing policies and the following subsequent activities:

• Policy drafting and supporting program confirmation to manage and monitor policy

• Stakeholder socialization

• Committee approval

• Gap assessment

• Implementation

• Ongoing monitoring

• Tracking and reporting

Support technology related policy and risk management activities to enable the policy management process and compliance with the enterprise policy governance model as follows:

• Technical background for policy impact assessments, implementation, and compliance monitoring

• Managing policy activity in compliance with enterprise requirements

• Managing policy content, materials, documentation and evidence

• Socialization and management of policy reviews and timelines

• Supporting policy implementation and compliance

• Managing reviewer lists

• Working in an enterprise policy management system

• Administration including version control, tracking implementation, exam evidence, user documentation, business line training, tracking, reporting, and accuracy and completeness of data  

Required Skills and Experience:

Seeking a technology professional, who can operate independently, is results driven, and can operate in an environment with competing priorities with deadlines.

The candidate will have the following skills and experience:

• Technical background in these areas; IT asset management, enterprise networking, server infrastructure, operating systems, database technologies, security and software/system development lifecycle.

• Understanding of security related technologies and practices including authentication and authorization systems, endpoint protection, encryption, network segmentation strategies, incident management, and vulnerability management.

• A strong understanding of the policy management lifecycle with experience managing a portfolio of 10+ policies.

• Experience with regulatory, legal and contractual requirements impacting financial institutions particularly in the operational risk area, i.e. FFIEC, SOX, PCI, GLBA, and industry frameworks and best practices related to policy management, security and information technology risk management.

• Understanding implementation of common security frameworks, i.e. NIST CSF, ISO 270001, CIS, CSC, etc.

Preferred Skills and Experience

The ideal candidate will exhibit the following:

• Ability to independently perform complex tasks and apply/connect information to other activities, tasks and work efforts and influence adherence to processes

• Excellent technical writing and verbal communication skills

• Ability to build and maintain relationships across diverse teams

• Skilled at balancing competing priorities and requirements to deliver projects and business as usual work

• Careful attention to detail that will ensure audit and regulatory evidence is complete and accurate

• Strong working knowledge of MS Excel, MS PowerPoint, MS SharePoint (lists, documents and user administration), Archer

NOTE:  This role offers a hybrid/flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days.