Senior Manager, SoFi International & Technisys Risk (2LOD)

The role:

The Senior Manager, SoFi International & Technisys Risk (2LOD) will drive strategic approach, governance, operational oversight, and act as a second line of defense risk management specialist across our global Technology Platform business unit and operating subsidiaries (Galileo).  This leader will work to mature foundational areas that drive risk program enhancement, risk mitigation, operational issue management, and establish primary risk aggregation across our (16+) global geographies.  At the core, the leader will partner with first line teams to leverage data to drive identification of risks, ensure robust controls are embedded in operational processes, and establish new risk programs.

Trust and Safety is the cornerstone of everything we do at SoFi Technologies and features as one of our critical firm priorities.  Key dimensions of responsibility include ensuring we have robust controls, processes, oversight, and risk aggregation across our Technology Platform business unit.  

This leader will work closely with 1LOD Technology Risk leadership to ensure adherence to the firm’s risk appetite, independent oversight, effective controls, escalation, and embedded governance.  

What you’ll do:

At SoFi, our ambition is to help our members achieve financial independence and reach their goals. We aim to be at the center of our members’ financial lives, and to help every member get their money right. You will be a part of the second line of defense (2LOD) Technology Risk Management team, dedicated to driving risk management around our foundational technology, with a specific focus on IT and AWS environments that provide the solutions supporting our mission to help members achieve their financial ambitions.  Opportunities for success will include but are not limited to the following risk activities:

• Establish and expand foundational global 2LOD risk management programs to include Program Management, Counterparty, Geographic, Concentration, Financial, RAS/Risk Appetite + KRI/Key Risk Indicator program, RCSA/Risk Control Self-Assessment, Technology, Operational Resilience/OpLosses, Client/KYB Risk, Policies + Procedures (ie: Incident Management), and Data Integrity.

• Grow and extend Technology Platform Risk (2LOD) leadership team to win across data-driven insights, subject matter expertise, best-in-industry infrastructure, innovative maturity roadmaps, and strategic investment needs to drive defined outcomes.  

• Harness vertical integration of Technology Platform Business Unit to position SoFi Technologies and our Galileo clients for optimal investment by effectively managing risk by thoughtfully managing primary risks, dependencies, resources, and milestones.  

• Drive accountability throughout Technology Platform by setting up operating cadence/rhythm that bridges strategy, execution, and performance management.

• Support interactions with SoFi Technologies affiliates and SoFi Technologies Inc - Board Risk Committee. 

• Define OKRs (Objectives and Key Results) for 2LOD Risk Management that define success for long-term and short-term strategy, priorities and goals with Business Unit and Risk Management Leadership.

• Identify and monitor risks associated with new products, strategies, and initiatives.

• Conduct periodic risk assessments to identify capability gaps, using both internal and external advisory to define and prioritize a fraud prevention maturity roadmap.

• Engage with Compliance/Legal and Business Unit Leaders to identify critical growth dependencies, control failures, unsolved operational and regulatory gaps across Technology Platform.   

• Oversee the building of the future of Technology Platform fusing our industry-best culture with technical and operational assets to successfully scale with high compliance to regulatory requirements.  

What you’ll need:

• 10+ years holistic leadership across Risk Management and Operational dimensions.

• Bachelor’s Degree in Risk Management, Information Technology, Management Information Systems, or equivalent professional experience. 

• Deep regulatory expertise including risk identification, assessment, readiness risk assessments, and remediation execution.

• Ability to drive innovation, new practices, and experience interacting with regulators (Federal Reserve, OCC, CFPB).

• Detailed knowledge of Risk Management Governance Frameworks and expertise in building, maturing, and advancing programs in complex organizations.

• Demonstrated progressive experience at top global financial institutions and/or leading technology platform companies.

• Ability to quickly understand complex business and technology environments.

• Strong collaboration and partnership capabilities and ability to build and foster strong cross-functional work relationships.

• Ability to communicate technology, security, and risk management concepts to both technical and non-technical partners.

Nice to have:

• Extensive work at a global technology business supervised by prudential financial regulators with a focus on building oversight and risk identification.

• AWS audit or risk management experience. 

• Relevant industry certifications, for example, CISSP, CCSK, CISA

• Familiarity with Google Docs, Sheets and Slides

• Experience working with global teams, Spanish language skills