Overview This position manages Governance, Risk, and Compliance (GRC) services within the Information Security department. This position will be responsible for developing and maintaining the strategic mission of the RCSA GRC function. Assists in the development, implementation and monitoring of processes used in support of delivering GRC services throughout the bank. Helps establish and maintain influential relationships with management, regulators, internal audit, and business partners. Responsibilities Business Strategy - Defines process, standards, and procedures utilized by team. Builds strong partnerships with industry peers, government agencies, and risk management communities. Monitors the industry for emerging techniques and technology applicable to Bank operations. Program Oversight - Manages GRC capabilities that identify, analyze, and mitigate risk for various information security and business units. Leads the development and reporting of RCSA results and risk information to executive leadership. Coordinate security efforts and audits by both internal and external parties. Managerial Functions - Establishes and monitors expectations to achieve company and department goals. Makes appropriate changes to team policies, procedures, and efficiencies in order to meet objectives. Manages the performance, training, and evaluation of assigned staff. Maximizes department achievements by providing professional RCSA – Designs processes, risks and controls and conducts RCSA activities in coordination with the Lines of Business within Information Security. Challenges the line of business to ensure process weaknesses are identified and documented. Remote eligible Qualifications Bachelor's Degree and 8 years of experience in Information Technology Security, Operations, Risk Management, or Audit OR High School Diploma or GED and 12 years of experience in Information Technology Security, Operations, Risk Management, or Audit Skill(s): Ability to develop and implement information security strategies in large, complex, Effective at communicating audience-appropriate information to technical, management, and executive , Proficiency in assessing risk and risk management , Knowledge of IT policies, standards, and procedures frameworks as well as their development and , Knowledge of standard risk management or control frameworks such as COBIT, ISO, and ITIL, Knowledge of regulatory requirements and guidelines This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants. If hired in NC the base pay for this position is generally between $125,000 and $216,000 per year. Actual starting base pay will be determined based on skills, experience, location and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment. First Citizens benefits programs are designed to meet our associates where they are in life. Full-time associates (20+ hours) are offered a comprehensive benefits program, with customized offerings, including those designed to support families, however defined. More information regarding our benefits offerings can be found here: https://jobs.firstcitizens.com/benefits.