IT Risk Lead

Is it a Bank? A cooperative? A leader in affordable housing? We are all those things and more!

Our core mission at FHLBank Indianapolis is to provide reliable and readily available liquidity to our member institutions to support housing finance and community development. Simply put, we’re a bank for banks, credit unions, community development financial institutions and insurers across Indiana and Michigan. We also assist in meeting the economic and housing needs of communities and families through grants and subsidized advances that support affordable housing and economic development.

But enough about us, let’s talk about you.

Are you looking for a company that views their employees as their greatest asset?

A company that’s dedicated to making a difference in the community? So much so they pay their employees to volunteer?

Do you want to join a talented workforce that prioritizes equal opportunity within an inclusive culture, and promotes learning and development, unique skills/ideas, and employee engagement?

If you’ve said yes to these questions, then we might be a match!

Here is what we offer:

• Flexible hybrid workforce model: Onsite three days a week and two days remote. We also offer remote flex days!

• Fantastic, competitive pay and total rewards

• Industry-high 401(k) match: up to 6% PLUS…an additional 4% contribution!

• Tuition reimbursement assistance: To help you continue to develop personally and professionally.

• Student loan repayment assistance: That’s right, we will help you repay outstanding student loans!

• Awesome Benefits Package: Medical, dental, vision benefits and even pet (you read that right) insurance!

• Generous time off: Vacation, paid federal holidays, birthday month floating holiday, volunteer day and summer hours program

• “Dress for your day” dress code: You choose the appropriate work attire based on what your day looks like.

Statistics show that it is less likely for some candidates to submit their application if they don't meet all the criteria within the job description. If this is you, we encourage you to give yourself a chance and submit your application anyway, as you may be the perfect match for this role!  ​

Purpose:

The IT Risk Lead is responsible for measuring, monitoring, and evaluating the risk and control environment ensuring technology solutions are in alignment with the Bank’s risk appetite. This role will have a comprehensive understanding of the Bank’s technology operating environment to proactively identify risks, controls, issues, and changes in the risk profile of the underlying systems.

The following statements are intended to describe the general nature and level of work being performed by individuals in the role. They are not intended to be an exhaustive list of all responsibilities or abilities required. The Bank reserves the right to alter or amend this description at any time.

Specific Responsibilities:

• Lead assessments based on the IT risk management framework and applicable industry best practices.

• Lead identification of technology control or process deficiencies based on established IT and Information Security standards.

• Lead IT and Information Security Risk and Control Self-Assessments to identify, assess and evaluate technology operational risk.

• Engage IT and Information Security stakeholders to support risk mitigation and effectiveness of technology controls.

• Review action plans to ensure appropriate mitigation and alignment with risk appetite.

• Review evidence for remediation plans to ensure appropriate risk mitigation.

• Monitor risk indicators and enterprise IT and Information Security metrics to assess overall technology risk profile.

• Review risk events to assess breakdown in controls, processes, and mitigation strategies. 

• Assist in conducting Artificial Intelligence (AI) risk assessments in alignment with the NIST AI Risk Management Framework.

• Research IT and Information Security emerging risk trends to implement best practices to support the program.

• Coordinate implementation of process improvement changes to optimize the program.

• Monitor action plans to ensure completion of mitigation strategies within established target due date timelines.

• Collaborate with other enterprise risk management functions to support risk mitigation.

• Participate in various enterprise working groups to support continuous risk engagement.

• Assist in the preparation of IT and Information Security risk reports for the Risk Committee, and Risk Oversight Committee of the Board of Directors.

• Other risk management duties as assigned.

Competencies:

Business

• Systems/Technology Complexity

• Banking Industry Knowledge

General

• Decision Making/Judgment

• Dependability

People

• Relationship Development

• Interpersonal Skills

Position Requirements:

• Bachelor’s degree with a minimum six (6) years’ relevant IT risk, information security, compliance, or IT audit experience in a financial services environment.

• Master’s degree in technology, finance, or business is preferred.

• Certifications such as CISSP, CCSP, CISM, and/or CRISC are an added advantage.

• Experience with risk assessment, interpretation, analytical and collaboration skills.

• Big 4 or technology consulting experience is an added advantage.

• Experience with Azure cloud security, risk, and compliance, including knowledge of security design constructs, principles, and blueprints for application architectures.

• Active industry certifications related to cloud security, i.e., Azure Fundamentals, Azure Security Technologies etc., are an added advantage.

• Proficient verbal and written communication skills, including the ability to effectively lead discussions and meetings.

• Ability to handle a variety of projects simultaneously.

• Technical skills experience required: control assessment, IT risk management, monitoring metrics and reporting, technical problem resolution, and project management.

• Working knowledge within the following IT risk domains or technologies is an added advantage: Database, Application, Network Security, and Cloud Security, Identity and Access Management, Change Management, Threat, and Vulnerability Management.

• Must not have been convicted on any civil or criminal charge that would suggest a risk to Bank security.

• Ability to work full-time.

• Ability to uphold and model the Bank’s Guiding Principles.

Hiring Range: $113,000 - $133,000

Hiring ranges reflect the base salary that the Bank reasonably expects to pay for a given role and is not inclusive of annual incentive award opportunities, retirement benefits or the value of other health and welfare or other ancillary benefits. We consider many factors when determining base salaries such as individual background and experience, the competitive environment, education, particular skill set(s), and industry and institutional knowledge.