Eames Consulting Hiring! Full Time VP, Technology Risk (Incident Reporting) Manager in - Ricebowl

Our client, a financial institution, is looking for a Vice President to lead its technology incident reporting function within Technology Risk. The focus is on reporting, not response. You will own the quality, timeliness and accuracy of incident reporting to senior management, committees and regulators, and ensure the firm learns from what its incidents tell it.

You will work closely with technology, operations, information security, compliance and risk teams, and act as the trusted point of contact on how technology incidents are assessed, escalated and reported.

Key responsibilities

• Own the technology incident reporting framework, including standards, templates, thresholds and escalation criteria
• Ensure incidents are classified, assessed and reported consistently and within required timelines, including to regulators where applicable
• Produce clear, accurate reporting for senior management, risk committees and the board, drawing out trends, root causes and emerging risks
• Review incident data and post-incident findings to challenge the quality of root cause analysis and the tracking of remediation actions
• Provide second line oversight and independent challenge to technology and business teams on reporting completeness and accuracy
• Monitor regulatory developments and incident reporting expectations, and translate them into policy and process changes
• Drive improvements to reporting tools, data quality, metrics and key risk indicators
• Support internal audit, regulatory examinations and thematic reviews relating to incident reporting
• Coach and develop team members where the role carries direct reports

About you

• Significant experience in technology risk, operational risk, resilience or a related function within a financial institution
• Strong working knowledge of incident reporting, regulatory notification requirements and technology risk frameworks
• Able to turn complex technical events into concise, accurate reporting for non-technical senior audiences
• Confident challenging stakeholders at all levels and influencing without relying on line authority
• Strong analytical skills, with experience using incident data to identify trends and control weaknesses
• Excellent written and verbal communication, with a high standard of attention to detail
• Degree-level education or equivalent; relevant professional certifications (for example CISA, CRISC or CISSP) are an advantage