Responsibilities include, but are not limited to: Function as a single point of contact for all aspects of enterprise IT policy governance, IT internal and external audits and engagements with regulators. Proactively identify potential risks within business operations, conduct risk assessments to understand the severity and likelihood of those risks, and document findings. Design and implement internal controls to mitigate identified risks, monitor the effectiveness of those controls, and take corrective actions when necessary. Promote adherence to relevant regulations, internal policies, and procedures within IT. Includes preparation for regulatory exams and facing off with regulators along with appropriate subject matter experts on staff. Collaborate with different teams within IT to understand their risk profile, provide guidance on risk management practices, and facilitate open communication about risks. Contribute to the development and maintenance of relevant risk management policies and procedures. Identify and escalate critical risks to appropriate levels of management when necessary. Custodian of Information Technology (IT) policy and process governance frameworks. Build, manage and mature best in class and comprehensive IT Controls framework spanning the entire IT organization. Regularly communicating risk information, IT governance initiatives, progress, and challenges to stakeholders at all levels of the organization. Identifying potential IT disruptions, analyzing their impact on business operations, and prioritizing mitigation strategies. Creating comprehensive IT resolution plans outlining steps for data backup, system restoration, communication protocols, and escalation procedures in case of major outages. Work with Valley Bank's Disaster Recovery team to regularly evaluate IT recovery plans through simulations and drills to promote effectiveness and identify areas for improvement. Maintaining detailed documentation of IT resolution plans, including system dependencies, critical data points, and contact information.