Location:
For Those Who Work At Home, North CarolinaJob Summary
This role supports a Director in the Enterprise Risk Management function, including execution and facilitation of enterprise risk programs, GRC strategy, AI‑enabled risk transformation, forward‑looking risk reporting, and special projects for the office of the Chief Risk Officer. The role operates across disciplines including program execution, analytics, transformation, and executive communication; driving effectiveness and efficiency while supporting modernization across risk processes.
Essential Functions
- Second Line of Defense Business Risk Team Support of ERM Risk Program Execution – Provide 2LOD Business Risk Team support to 2LOD teams through facilitation and execution of risk activities owned within the 2LOD including: risk and control self‑assessment (RCSA), business unit risk profile coordination, issues management, third party risk management, and regulatory change management. Assists the Director with the design and execution of ongoing risk monitoring routines and reporting within 2LOD.
- Forward‑Looking Risk Indicators & Board Reporting - Contribute to the quarterly refresh and enhancement of the CRO Forward‑Looking Indicator Dashboard, including data sourcing, trend analysis, construction, and review of executive‑ready visualizations for Board Risk Management Reports and CRO regulatory update materials.
- AI Integration for Risk Management - Support the design, prototyping, testing, and deployment of GenAI use cases for risk workflows, including tool design, prompt engineering, output validation, and human‑in‑the‑loop governance aligned to enterprise AI Risk Management standards.
- Strategic Risk Transformation Projects - Assist in facilitation and execution of transformation initiatives, including cross‑LOD stakeholder coordination, use case identification and design, dependency analysis, milestone tracking, and leadership status reporting.
- GRC Strategy, Layout & Archer Administration - Partner with Director and stakeholders on GRC platform strategy and reporting including business requirements, testing coordination, report development, and cross-team consulting.
- Policy, Procedure & Program Document Management - Draft, redline, and maintain enterprise risk program artifacts for all relevant activities, ensuring alignment to OCC Heightened Standards and internal governance requirements.
- Executive & Regulatory Communication – Assist in the production concise, board‑ready written and visual deliverables for the CRO, ELT, Board Risk Committee, OCC, and FRB, including top risk narratives, memos, and supervisory update materials.
- Cross‑Functional Coordination & Analytical Support – Support the team serving as integration point across ERM, Operational, Risk Compliance Risk, Credit Risk, Treasury Risk, Model Risk, Technology Risk, Strategy Risk, Internal Audit, and 1LOD partners on shared deliverables and enterprise campaigns relative to 2LOD-owned risks, controls, metrics, and findings.
- Portfolio & Priority Management - Independently manage a portfolio of concurrent workstreams with varying cadences maintaining clear status, dependencies, and stakeholder alignment.
Required Qualifications
- Bachelor's degree required (Accounting, Finance, MIS, Business, or related field).
- 7+ years of progressive experience in enterprise risk management, operational risk, risk execution, or internal audit, in a large financial institution.
- Demonstrated working knowledge of internal control frameworks (COSO), risk taxonomies, RCSA methodology, and issues management lifecycles.
- Hands‑on experience with Archer GRC (or equivalent enterprise GRC platform) across risk register, controls, findings, remediation plans, and reporting modules.
- Proven ability to draft, edit, and manage risk policies, programs, standards, and procedures aligned to regulatory expectations (OCC, FRB, FDIC).
- Strong executive communication skills - concise written narratives, board‑ready visualizations, and confident verbal engagement with senior leaders.
- Demonstrated experience managing multiple concurrent priorities under multiple concurrent deadlines.
- Project management proficiency with the ability to influence cross‑functional stakeholders and drive execution without direct authority.
Preferred Qualifications
- Master's degree (MS in MIS, Accounting, Finance, or related) or MBA preferred.
- Professional certifications strongly preferred CPA, CIA, CRMA, FRM.
- Direct experience applying GenAI/agentic tooling to risk management workflows (control design review, control automation analysis, policy compliance mapping, narrative drafting), including prompt engineering and output validation.
- Experience with risk execution transformation initiatives including process redesign, risk program calibration, GRC platform modernization, or AI transformation.
- Experience developing forward‑looking risk indicators, KRI frameworks, or macro/market indicator dashboards.
- Experience preparing CRO‑ or Board‑level risk reporting and regulatory update materials.
- Exposure to third‑party risk, model risk governance, or AI risk governance frameworks (NIST AI RMF, SR 11‑7 / SR 26‑2 principles).
COMPENSATION AND BENEFITS
This position is eligible to earn a base salary in the range of $116,000.00 - $216,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.
Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.
Job Posting Expiration Date: 08/12/2026 KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [email protected].
#LI-Remote
Skills Required
- Bachelor's degree (Accounting, Finance, MIS, Business, or related field).
- 7+ years of progressive experience in enterprise risk management, operational risk, risk execution, or internal audit in a large financial institution.
- Working knowledge of internal control frameworks (COSO), risk taxonomies, RCSA methodology, and issues management lifecycles.
- Hands-on experience with Archer GRC (or equivalent enterprise GRC platform) across risk register, controls, findings, remediation plans, and reporting modules.
- Proven ability to draft, edit, and manage risk policies, programs, standards, and procedures aligned to regulatory expectations (OCC, FRB, FDIC).
- Strong executive communication skills including concise written narratives and board‑ready visualizations; confident verbal engagement with senior leaders.
- Demonstrated experience managing multiple concurrent priorities under multiple concurrent deadlines.
- Project management proficiency with the ability to influence cross‑functional stakeholders and drive execution without direct authority.
- Master's degree (MS in MIS, Accounting, Finance, or related) or MBA.
- Professional certifications (CPA, CIA, CRMA, FRM).
- Direct experience applying GenAI/agentic tooling to risk management workflows, including prompt engineering and output validation.
- Experience with risk execution transformation initiatives including process redesign, risk program calibration, GRC platform modernization, or AI transformation.
- Experience developing forward‑looking risk indicators, KRI frameworks, or macro/market indicator dashboards.
- Experience preparing CRO‑ or Board‑level risk reporting and regulatory update materials.
- Exposure to third‑party risk, model risk governance, or AI risk governance frameworks (NIST AI RMF, SR 11‑7 / SR 26‑2 principles).
KeyBank Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about KeyBank and has not been reviewed or approved by KeyBank.
-
Retirement Support — A dollar-for-dollar 401(k) match up to 7% of eligible pay is positioned as a standout element of the total rewards package. Additional financial programs like discounted stock purchase and banking discounts further strengthen perceived long-term value.
-
Leave & Time Off Breadth — A pooled PTO bank with amounts that scale by level and tenure is described as a meaningful benefit and a retention lever. Paid parental leave is also included, adding to the breadth of time-off support.
-
Wellbeing & Lifestyle Benefits — Wellness incentives tied to HSA contributions and company-sponsored health and wellbeing programs add tangible non-cash value. A Lifestyle Spending Account and counseling resources expand support beyond traditional medical coverage.
KeyBank Insights
What We Do
At KeyBank we’ve made a promise to our clients that they will always have a champion in us. To deliver on our promise, we’re committed to building a team of engaged employees who do the right thing for our clients and shareholders, and help them achieve financial wellness each and every day.








