<p><b>Location:</b></p>4910 Tiedeman Road, Brooklyn Ohio<p></p><p></p><div><div><p><b>About the Job</b></p></div><div><p><span><span>This 2nd Line of Defense role resides within the Data Risk Governance Office (DRGO), supporting oversight of enterprise-wide data governance practices across KeyCorp. The </span><span>Operational Risk Officer is responsible for providing independent oversight and credible challenge to the first line of defense (1LOD) regarding data governance, data quality, metadata management, and data lifecycle practices. This role engages with </span><span>leaders across business units and technology teams to ensure alignment with Key’s Data Risk Management Framework, regulatory expectations, and industry best practices.</span></span><span> </span></p></div><div><p><span><span>The ideal candidate will have deep experience in data governance, operational risk, and risk oversight, with the ability to identify material risks, assess control effectiveness, and influence remediation strategies.</span></span><span> </span></p></div><div><p><span> </span></p></div><div><p><b>Essential Functions</b></p></div><div><ul><li><p><span><span>Provide oversight and credible challenge of data governance practices across the enterprise</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Evaluate risks and controls related to metadata management, data quality, data lineage, and data lifecycle</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Review and challenge 1LOD Risk and Control Self-Assessments (RCSAs) and data risk profiles</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Monitor and report on adherence to Key’s Data Risk Management Framework and related policies</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Support the development and refinement of Key Risk Indicators (KRIs), data tolerances, and performance metrics</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>S</span><span>upport Data Risk Reporting and escalation management processes</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Support the</span><span> Data Risk Policy and Framework adherence and maturity monitoring</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Participate in regulatory intelligence gathering and emerging risk identification</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Assist with exam and regulatory management, including audit coordination and response</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Participate in the execution</span><span> of the Data Risk Validation Framework and data issue verification activities</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Conduct risk and control evaluation and testing across data-related processes</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Consult with 1LOD on business initiatives, critical change programs, and technology integration</span></span><span> </span></p></li></ul></div></div><div><div><ul><li><p><span><span>Assess risks associated with new products, services, and third-party engagements (TPM)</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Support regulatory reporting validation and enterprise program integration efforts</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Identify and assess business process risks (BPRI), data quality variances, and exception trends</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Escalate significant risk issues and facilitate corrective actions</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Foster strong relationships with business partners </span><span>to promote risk transparency</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Identify gaps and deficiencies in existing data risks and controls, evaluate their impact, and recommend remediation actions to address them</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Draft assessment and validation reports and presentations, highlighting areas of concern, emerging risks, and recommended remedial actions for stakeholders and senior management</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Maintain awareness of emerging regulatory and industry trends in data governance and operational risk</span></span><span> </span></p></li></ul></div><div><p><span> </span></p></div><div><p><b>Required Qualifications</b></p></div><div><ul><li><p><span><span>Bachelor’s degree in </span><span>I</span><span>nformation </span><span>T</span><span>echnology, Business, Finance, or related field, or equivalent experience </span></span></p></li></ul></div><div><ul><li><p><span><span>Minimum 5</span><span> years of experience in data governance, technology risk, cybersecurity risk, operational risk, enterprise risk, audit, or compliance </span></span></p></li></ul></div><div><ul><li><p><span><span>Experience in a second line oversight function within financial services (preferred)</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Advanced </span><span>education</span><span> or relevant certifications (preferred)</span></span><span> </span></p></li></ul></div><div><p><span> </span></p></div><div><p><b><span>Certifications (Preferred)</span></b><span> </span></p></div><div><ul><li><p><span><span>ISACA: CISA, CRISC, CGEIT, CISM</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Data Governance: DCAM, CDMC, CDMP</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>ISC2: CISSP, CCSP</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Cloud Security Alliance: CCAK</span></span><span> </span></p></li></ul></div></div><div><div><p><span> </span></p></div><div><p><b><span>Skills &amp; Competencies</span></b><span> </span></p></div><div><ul><li><p><span><span>Working knowledge</span><span> of data governance frameworks (e.g., DCAM, DMBOK, CDMC)</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Demonstrated ability to assess and challenge data-related risks and controls</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Strong</span><span> </span><span>analytical, communication, and stakeholder engagement skills</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>E</span><span>xecution-oriented mindset</span><span> with strong attention to detail</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Ability to manage multiple priorities in a fast-paced environment</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Proficient in Microsoft Office Suite, SharePoint, Archer GRC, and data visualization tools (e.g., Tableau, Power BI)</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Familiarity with Agile methodologies and project management tools</span></span><span> </span></p></li></ul></div><div><ul><li><p><span><span>Intellectual curiosity and commitment to continuous improvement</span></span><span> </span></p></li></ul></div><div><p><span> </span></p></div><div><p><b><span>Core Competencies</span></b><span> </span></p></div><div><p><span><span>All KeyBank employees are expected to demonstrate Key’s Values and sustain proficiency in identified Leadership Competencies.</span></span><span> </span></p></div><div><p><span> </span></p></div><div><p><b><span>Physical Demands</span></b><span> </span></p></div><div><p><span><span>General Office - Prolonged sitting, ability to communicate face to face in person or on the phone with teammates and clients, frequent use of PC/laptop, occasional lifting/pushing/pulling of backpacks, computer bags up to 10 lbs.</span></span><span> </span></p></div><div><p><span> </span></p></div><div><p><b><span>Travel</span></b><span> </span></p></div><div><p><span><span>Occasional travel to include overnight stay.</span></span><span> </span></p></div></div><p></p><p></p><p>COMPENSATION AND BENEFITS</p><p>This position is eligible to earn a base salary in the range of $90,000<span> </span>to $110,000 annually depending on location and job-related factors such as level of experience. Compensation for this role also includes eligibility for short-term incentive compensation and deferred incentive compensation subject to individual and company performance.</p><p></p><p>Please click <a href="https://www.key.com/kco/images/Key_Benefit_Eligibility_Chart.pdf" target="_blank">here</a> for a list of benefits for which this position is eligible.</p><p></p><p>Key has implemented a role-based Mobile by Design approach to our employee workspaces, dedicating space to those whose roles require specific workspaces, while providing flexible options for roles which are less dependent on assigned workspaces and can be performed effectively in a mobile environment. As a result, this role may be Mobile or Home-based, which means you may work primarily either at a home office or in a Key facility to perform your job duties.</p><p></p>Job Posting Expiration Date:  09/26/2025&amp;#xa;&amp;#xa;KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.<p></p><p><span>Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing <span><span><span>HR_Compliance@keybank.com.</span></span></span></span></p><p></p><br /><p><span>#</span><span>LI-Remote</span></p>