2nd Line Technology Risk & Governance Sr Manager

Position Overview First Merchants Bank is seeking a 2nd Line Technology Risk & Governance Sr Manager to join our team. This position will support independent oversight, credible challenge, and risk appetite alignment for technology risk across the enterprise. The role contributes to the execution and ongoing maintenance of the Second Line Technology Risk Framework, assessing and challenging 1st line risk identification, ratings, and control effectiveness; monitoring adherence to risk appetite; and supporting escalation of material exposures through established governance (e.g., ORC/ERMC/Board reporting). The role provides independent risk oversight through collaboration with 1st line leaders and control owners, including advisory support, credible challenge, and participation in select independent risk assessments as appropriate. Responsibilities Oversight, Credible Challenge & Risk Appetite Alignment Provide independent 2nd line risk oversight by assessing 1st line technology risk practices, major initiatives, incidents, root cause analyses, control gaps, and Archer issues to remain aligned with the Risk Appetite Statement, ERM Framework, and Technology Risk Framework. Provide risk‑based challenge and escalation support, leveraging 1st line and specialized SMEs for technical depth where appropriate. Review, assess, and provide credible challenge to 1st line technology risk identification, inherent/residual ratings, and control design/effectiveness; raise observations and recommendations where misalignment with risk appetite or standards is identified. Review Key Indicators and trend analysis for technology domains; partner with ORM to monitor Tier 1/Tier 2 indicators and support escalation of deviations in accordance with policy. Targeted 2nd Line Technology Risk Oversight & Thematic Reviews Provide targeted, risk‑based second line oversight of technology risk areas where existing first line assessments, Internal Audit activity, regulatory feedback, incidents, issues, or emerging risk themes indicate potential gaps in risk coverage, control effectiveness, remediation, or risk acceptance. Evaluate specific areas of elevated or emerging technology risk, which may include change management, segregation of duties, user access, incident root cause analysis, remediation sufficiency, risk acceptance practices, or alignment to the Technology Risk Framework. Leverage and participate in existing assessments, audits, regulatory exams, issue management, and governance processes to identify residual risk themes and determine where second line credible challenge or targeted review activity would provide incremental value. Governance, Policy Alignment & Reporting Participate in and contribute to relevant governance forums (e.g., IT Strategy Committee, Information Security Committee, IT Operations Subcommittee, Data Governance, Operational Risk Committee, ERMC) to help surface technology risk trends and issues. Monitor alignment with ERM policies (ERM Framework, Issue Management, Key Indicators), supporting IT/InfoSec policies (e.g., GLBA, IRP, Third Party Risk), and assist in tracking issues through closure via ERM processes. Engage and provide credible challenge in the Risk and Control Self‑Assessment governance cycle. Draft and support technology risk reporting for executive management and Board level materials, highlighting risk appetite breaches, emerging risks, thematic trends, and remediation status. Collaboration & Advisory Promote risk awareness across the Bank and serve as a 2nd line subject matter resource to 1st line partners while maintaining appropriate independence. Partner across ERM, IT, Cyber/InfoSec, Legal/Compliance, Internal Audit, and SOX to provide second line technology risk oversight under the ERM framework, helping evaluate Technology Risk program requirements are appropriately scoped, coordinated, monitored, and escalated without duplicating first line or assurance responsibilities. Qualifications Education – Bachelor’s degree in technology, business or a related field. Experience – A minimum of seven (7) years of technology or technology risk experience, plus a minimum of three (3) years in IT Risk & Governance and/or 2nd line/ERM oversight (or Internal Audit covering technology risk) providing independent challenge. Preferred Qualifications MBA or other advanced degree IT/ITIL Certifications IIBA Certification Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP) Compensation & Benefits Base Pay PLUS Bonuses Medical, Dental and Vision Insurance 401k Health Savings and Flexible Spending Accounts Vacation/Sick Time Paid Holidays Paid Parental Leave Tuition Reimbursement Additional Benefits About Company First Merchants is guided by a genuine philosophy of being a meaningful place to work and having a prosperous impact across all walks of life throughout the communities we serve, including consumers, businesses and other organizations. Our Vision, Mission and Team statement reflect and reinforce that authentic service philosophy. Vision To enhance the financial wellness of the diverse communities we serve. Mission To be the most responsive, knowledgeable, and high‑performing financial organization for our clients, teammates, and shareholders. Team We are a collection of dynamic colleagues with diverse experiences and perspectives who share a passion for positively impacting lives. We are genuinely committed to attracting and engaging teammates of diverse backgrounds. We believe in the power of inclusion and belonging. Apply today to begin your career with us! Equal Opportunity Employer Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, review the Know Your Rights notice from the Department of Labor. #J-18808-Ljbffr