Requisition ID: Join a purpose driven winning team, committed to results, in an inclusive and high:performing culture. Position: Vice President, IT Remediation and Horizontal Programs Business Line: Office of the Chief Information Officer The Vice President, IT Remediation and Horizontal Programs is a senior leader within the Office of the CIO, accountable for driving the execution of enterprise:wide technology risk remediation initiatives. This role is focused on closing high:impact risk issues, control weaknesses, and regulatory findings across critical domains - ensuring sustainable, audit:defensible solutions that reduce technology risk exposure across the bank. This role will lead horizontal remediation programs that span multiple control areas, including Identity and Access Management (IAM), Data Protection, Vulnerability Management, Asset and Software Currency, Endpoint Controls, and Technology Resiliency. This role requires deep experience in root cause analysis, program delivery, and embedding long:term risk reduction across a complex and regulated technology landscape. This is a high:visibility role requiring partnership across Cybersecurity, Infrastructure, Risk, Compliance, and Application teams, with frequent engagement with internal audit and external regulators. Accountabilities Enterprise Remediation Ownership: : Lead and deliver complex technology risk remediation programs addressing regulatory findings, audit issues across global and U.S. regions. : Provides oversight, planning, execution, and delivery of the IT Risk and Cyber Security remediation program. Later leveraging best practices/ learnings globally to lead a Global IT Risk and Cyber Security transformation. Overseeing the implementation of risk remediation plans and report to the Executive Management, the Risk Management Committee, and external regulators. : Responsible to develop, implement and monitor a comprehensive Enterprise IT Risk Management Program within the First Line of Defence that governs, enables and oversees existing IT Risk functions in accordance with regulatory expectations and evolving business practice. Horizontal Program Leadership: : Drive remediation and control uplift across key enterprise domains, including: : : Identity and Access Management (IAM): Close access design and entitlement control gaps. : Data Protection: Improve protection of sensitive data across platforms and jurisdictions. : Vulnerability Management: Accelerate remediation of known vulnerabilities and address root causes, including process, ownership, and tooling gaps. : Software Currency and Asset Management: Eliminate legacy, unsupported technologies and enforce lifecycle governance. : Endpoint Controls: Uplift control configurations and management capabilities across end:user and server environments. : Technology Resiliency: Coordinate remediation activities stemming from resiliency assessments and Resiliency Steering Committee (SteerCo) direction. Sustainable Control Remediation: : Ensure issues are resolved at the root cause level and solutions are embedded in operational processes to prevent recurrence. Drive risk:based prioritization and execution discipline. Regulatory and Audit Response: : Act as a key remediation lead in response to regulatory exams (e.g., OSFI, FRB) and internal audits. Provide credible plans, progress updates, and closure evidence. : Manager interactions with US Regulators on Technology Regulatory Compliance matters and ensure all related matters are dealt with in an expedient, consistent, and efficient manner. Governance and Risk Accountability: : Establish effective remediation governance, including risk acceptance processes, remediation tracking, risk metric validation, and closure approvals aligned with enterprise risk and audit standards. Cross:Functional Collaboration: : Partner a