FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.

Information Technology Enterprise Risk Manager
Northwest BankEnterprise Risk Manager overseeing IT, information security, and data risks for Northwest Bancshares. Challenging controls, assessments, remediation, and regulatory compliance across technology operations.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in managing operational risk frameworks, particularly in information technology and information security, while ensuring compliance with relevant regulations. Proficient in risk management methodologies and capable of conducting thorough risk assessments and control testing.
Highest-signal resume keywords
Operational Risk ManagementRisk Control Self-Assessment (RCSA)Information Security ComplianceNIST Cybersecurity Framework (CSF)Vulnerability Scanning and Penetration Testing
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk Management MethodologiesInformation Technology PrinciplesData Security Best PracticesControl TestingRoot Cause Analysis
Soft Skills
Analytical SkillsProblem-Solving SkillsCommunication AbilitiesTeam Collaboration
Tools & Technologies
Microsoft OfficeDepartment-Specific Applications
Certifications & Qualifications
ITILCISACISMCRISCCISSP
Industry Keywords
GLBAPCI DSSHIPAAFinancial Institution ExperienceControl Gaps
Tech Stack
Tools & technologiesCyber Security
About the role
Key responsibilities & impact- Support execution and oversight of Northwest's Operational Risk framework for information technology, information security, and data risks
- Oversee technology-related Risk and Control Self-Assessments (RCSA), challenge conclusions, and monitor routines
- Independently assess risks and drive actions addressing root causes of significant residual operational risk
- Validate first-line control testing and independently test IT, information security, and data controls
- Mature second-line technology and information security risk assessments, document controls, identify gaps, and create action plans
- Support key risk assessments, including GLBA, authentication and access, PCI DSS, and HIPAA assessments
- Consult on issues addressing control gaps and monitor remediation progress
- Establish and review metrics measuring technology risks and challenge deficient-metric action plans
- Oversee front-line IT, information security, and data activities and exception handling
- Challenge IT, information security, and data policies and standards for corporate governance compliance
- Analyze losses associated with IT failures, disruptions, and errors; identify root causes and recommend future risk avoidance
- Ensure compliance with company policies, procedures, and federal/state regulations
- Navigate Microsoft Office and department-specific applications
- Work as part of a team and with on-site equipment
- Perform additional duties assigned by management
Requirements
What you’ll need- Bachelor's Degree in Management Information Systems, Cybersecurity, or Business Administration
- 8–12 years of cybersecurity/information technology experience
- 6–8 years of prior financial institution experience
- Deep understanding of information technology, information security, and data principles and best practices
- Proficiency in risk management methodologies, frameworks, and RCSA execution
- Knowledge of NIST CSF, GLBA, PCI DSS, and HIPAA
- Experience with vulnerability scanning and penetration testing tools
- Strong analytical and problem-solving skills
- Excellent communication and reporting abilities
- Ability to comply with Northwest policies and procedures and federal/state regulations
- Ability to navigate Microsoft Office, computer applications, and department-specific software
- ITIL, CISA, CISM, CRISC, and CISSP certifications are listed
Benefits
Comp & perks- Competitive compensation and benefits
- Professional development opportunities
- Regularly celebrating wins