Job Information
Federal Reserve System Sr. IT Risk Specialist - Technology Service Provider Supervision in San Francisco, California
Company
Federal Reserve Bank of San Francisco
We are the Federal Reserve Bank of San Francisco—public servants with a mission to advance the nation’s monetary, financial, and payment systems to build a stronger economy for all Americans. We are a community-engaged bank, and are committed to understanding and serving the vibrant, expansive communities of the Twelfth District. That means we seek and appreciate new perspectives. We respect people for what they do and for who they are. We build opportunities to learn and grow. When you join the SF Fed, you become part of a diverse team united in its purpose to promote an economy that works for everyone.
The Supervision + Credit group is responsible for the supervision and regulation of state member banks (SMBs), bank holding companies, savings and loan holding companies, financial holding companies, data service providers, trust companies, and foreign banking organizations that operate in the Twelfth District. Supervised institutions are in all states of the District and range in size and complexity from small community organizations to some of the largest banking organizations in the country.
Right now, we have a phenomenal opportunity to add a Sr. IT Risk Specialist - Technology Service Provider Supervision to our “Significant Service Provider” team for the Visa organization. Visa is one of the largest, most complex providers in our portfolio.
Our ideal candidate is part IT auditor, part bank examiner with a depth in IT and Cybersecurity risk policy and governance. In this high profile, critical role you will help craft the strategy and set the priorities for the Visa work. You will present to leaders at all levels in our organization (local SF Fed as well as our Board of Governors). If you would like to work on one of our largest, most complex entities and gain visibility in the Federal Reserve System, this could be the job for you!
You will be primarily responsible for leading and participating in the supervision of SSPs, preparing, reviewing, and implementing risk-focused supervisory activities applying the Federal Financial Institutions Examination Council’s IT Examination Handbook (https://ithandbook.ffiec.gov/).
Supervisory activities involve onsite and offsite examinations and ongoing monitoring, conducted through meetings with companies’ management and review of management reports and third-party assessments. Through effective oversight of SSPs, you will help ensure that operational and cyber resilience concerns that could impact a broad range of financial institutions are identified and remediated in a timely manner. You will interact closely with counterparts in other Federal Reserve districts and at other FBAs that share responsibilities for SSP supervision. You will also add to the SF Fed’s broader Service Provider Team priorities and the Large Institutions Supervision strategy.
This position reports to the Service Provider Team AVP and is subject to a 5-year rotation.
Essential Responsibilities:
Serve as the Federal Reserve’s Deputy Central Point of Contact (CPC) for Visa:
Collaborate with the OCC, FDIC, and California Department of Financial Protection and Innovation CPCs to develop and implement Visa’s supervisory strategy.
Support annual assignment of the interagency Uniform Rating System for Information Technology (URSIT) ratings by leading and participating in risk-focused assessments of Visa’s products, services, and control functions through organizational activities and target examinations.
Review quarterly management reporting packages to stay updated on the firm’s strategic developments and identify any emerging supervisory concerns potentially warranting changes to the supervisory strategy.
Coordinate remediation of supervisory concerns and the firm’s self-identified areas of weaknesses.
Provide relevant feedback to FRB examiners participating in Visa’s supervisory activities, in collaboration with examiners’ managers.
Work closely with the interagency examination team seeking common ground to help reconcile any differences in opinion.
Demonstrate leadership, partnership, and influencing skills, building, and maintaining effective working relationships within the interagency CPC team, SF Fed and the Federal Reserve System team members, and with the supervised firm.
Participate in vetting’s of supervisory assessments with SF Fed partners and the SSP MG.
Support compliance with SF Fed’s Visa Operational Procedures Manual, the FBAs’ Administrative Guidelines, and amendments thereto.
Support and serve as back-up to Lead CPC in carrying out various supervisory responsibilities.
Add to Federal Reserve System’s SSP Supervisory Priorities:
- Participate in supervisory activities at out-of-District SSPs to develop horizontal perspective and expand SSP portfolio knowledge.
Requirements:
Bachelor’s degree in business administration, computer science, or other related field is required; advanced degree and/or professional certifications (CISA or CIA) is a plus.
Typically requires seven or more years of combined safety and soundness and IT examination experience, or senior IT audit experience at large financial institutions, or their service providers.
Extensive understanding of and ability to interpret and apply IT supervisory mentorship and industry standards, including the Uniform Rating System for Information Technology (SR 99-8); FFIEC IT Handbook (https://ithandbook.ffiec.gov), Sound Practices to Strengthen Operational Resilience (SR 20-24), and relevant NIST publications and CIS Controls.
Independent thinking abilities as well as dynamic analytical, written, and verbal communication, and interpersonal skills.
Ability to multi-task, handle team members’ expectations, and deliver successful outcomes.
Willing and able to travel up to 25%
This position requires access to confidential supervisory information, which is limited to “Protected Individuals.” Protected Individuals include, but are not limited to, U.S. citizens and U.S. nationals, U.S. permanent residents who are not yet eligible to apply for naturalization, and U.S. permanent residents who have applied for naturalization within six months of being eligible to do so or who will sign a declaration of intent to apply for naturalization before they begin employment.
Helpful, but not required:
An examiner commission from a federal or state banking supervisory agency or experience as an auditor at a large financial institution is a plus, but not required.
Any of the following:
Certified Information Systems Auditor (CISA)
Certified Internal Auditor (CIA)
Certified Information Systems Security Professional (CISSP)
Certified Chief Information Security Officer (CCISO)
Certified Cloud Security Professional (CCSP)
Certified Data Privacy Solutions Engineer (CDPSE)
Certified Information Security Manager (CISM)
Certified in Risk and Information Systems Control (CRISC)
Certified in the Governance of Enterprise Information Technology (CGEIT)
#LI-Hybrid
Base Salary Range: Min: $155,700 Mid: $205,600 Max: $255,300 (Location: San Francisco)
Final salary and offer will be determined by the applicant’s background, experience, skills, internal equity, and alignment with geographic and other market data.
We offer a wonderful benefits package including: Medical, Dental, Vision, Pre-tax Flexible Spending Account, Backup Child Care Program, Pre-Tax Day Care Flexible Spending Account, Paid Family Care Leave, Vacation Days, Sick Days, Paid Holidays, Pet Insurance, Matching 401(k), and Retirement/Pension.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. The SF Fed is an Equal Opportunity Employer.
The Bank's ethics rules generally prohibit employees, their spouses/domestic partners, and minor children from owning securities, such as stock, of banks or savings associations or their affiliates, such as bank holding companies and savings and loan holding companies. Employees in the S+C group also must ensure there are no conflicts of interest related to their previous employment and current financial interests. S+C employees may be subject to borrowing and deposit restrictions and may need to recuse themselves from certain supervisory work. Please review Section 5.3 and Appendix B of the Bank’s Code of Conduct to ensure compliance with the Code of Conduct (https://www.frbsf.org/wp-content/uploads/Code-of-Conduct_December-23-2022.pdf) conflict of interest rules and personal investment restrictions.
Full Time / Part Time
Full time
Regular / Temporary
Regular
Job Exempt (Yes / No)
Yes
Job Category
Bank Examination
Work Shift
First (United States of America)
The Federal Reserve Banks believe that diversity and inclusion among our employees is critical to our success as an organization, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.
Privacy Notice (https://www.kansascityfed.org/documents/7797/Workday_Privacy_Notice.pdf)
OUR BANK has one of the most recognizable brands around the world. The Federal Reserve is the central bank of the United States—one of the world's most influential, trusted and prestigious financial organizations. The Federal Reserve is charged with the important mission of promoting a strong economy and a stable financial system and fulfills this responsibility by formulating national monetary policy, supervising and regulating banks and bank holding companies, and providing financial services for banks and the U.S. government.
OUR PEOPLE are diverse in background and ideas, which allows for ongoing creativity and innovation. Ultimately, they are the ones who push our high-performance, exchange-driven culture forward.
Why Our People Choose Us:
Our reputation precedes us
There will always be room for personal growth
Our people are first
You’ll find the right balance
Your responsibilities will be meaningful
We hope that you will be our future colleague.