Technology Risk & Control Director – Resiliency, Third Party, and Infrastructure

Description

Summary:

The Technology Risk & Control Director – Resiliency, Third Party, and Infrastructure is a front-line risk and control leader responsible for strengthening risk ownership, control execution, and operational resilience across technology, cybersecurity, and resiliency domains. This role partners closely with technology, operations, independent risk, compliance, audit, and executive stakeholders to identify, assess, manage, and report risk in alignment with the three lines model. The leader will bring strong technology risk experience from a top-tier financial institution or other highly regulated industry, direct front-line risk and control experience, and the executive presence needed to prepare and present polished materials for senior management, regulatory, and Board audiences.

Duties and Responsibilities:

• Serve as a senior front-line risk and control leader for technology resiliency, operational resilience, disaster recovery, third party, incident response, production stability, and related technology risk domains.

• Lead leaders and build a high-performing team accountable for risk identification, control design, control execution, issue management, risk reporting, and sustainable remediation.

• Partner with technology, resiliency, operations, independent risk, compliance, legal, audit, and business stakeholders to drive practical, risk-based outcomes and effective control ownership.

• Apply direct front-line experience in the three lines model to clarify ownership, strengthen accountability, and ensure appropriate engagement with second- and third-line partners.

• Oversee risk and control activities related to infrastructure resilience, application resilience, disaster recovery, business continuity dependencies, third-party technology resilience, incident management, and control testing outcomes.

• Prepare executive-ready materials, regulatory responses, Board reporting, risk assessments, issue updates, and decision papers with clear messaging, polish, and appropriate escalation of risk themes.

• Provide seasoned leadership and judgment in senior forums, including the ability to brief executive audiences, respond to challenge, and represent the front-line risk and control perspective with credibility.

• Drive consistency, transparency, and cohesiveness with the broader technology risk leadership team while maintaining strong partnerships across the enterprise.

• Promote a strong risk culture through proactive communication, disciplined execution, issue ownership, and thoughtful challenge that supports safe and resilient technology delivery.

• Perform other duties as assigned.

Basic Qualifications:

• Bachelor's degree or equivalent level of work experience.

• 10+ years of experience in technology, resiliency, technology risk, operational risk, or related risk and control roles.

• 8+ years of direct front-line risk and control experience in a top-tier financial institution or other highly regulated industry.

Preferred Qualifications:

• Demonstrated experience operating within the three lines model, including direct engagement with independent risk management, compliance, audit, and regulatory stakeholders.

• Experience leading leaders and managing senior professionals in complex, matrixed environments.

• Deep understanding of technology resiliency, operational resilience, disaster recovery, third party, incident management, technology operations, and related risk and control frameworks.

• Strong executive presence with experience preparing and delivering materials for senior management, Board, regulator, and audit audiences.

• Proven ability to influence, partner, and drive consensus across technology, business, risk, control, and corporate function stakeholders.

• Seasoned, professional leadership style with strong judgment, maturity, credibility, and the ability to operate effectively as part of a cohesive leadership team.

• Demonstrated ability to lead teams through ambiguity, prioritize work, manage competing demands, and deliver high-quality outcomes with accountability and transparency.

• Experience with risk assessments, control assessments, issue management, remediation governance, metrics, KRIs, regulatory exams, and audit engagement.

• Strong written and verbal communication skills, including the ability to synthesize complex technology risk topics into clear, concise, executive-ready messaging.

• Strong preference for recognized industry certification such as CRISC, CISA, CISM, CISSP, CBCP, ITIL, or similar.

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Yes

Workplace Type:

Office

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Compensation Range:

The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education.  Colleagues in this position are also eligible to participate in an applicable incentive compensation plan.  In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO).

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Note to Agency Recruiters:  Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume.  All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.