The Sr. Adv, Portfolio Risk Management reports directly to the Director of Business Operations. The Sr. Advisor is responsible for owning the portfolio risk management process that identifies areas of concern, opportunities, and delay, report on potential/known issues to leadership and ITS staff, and collaboratively facilitates risk mitigation plans ensuring their proper closure. Risk areas include, but are not limited to, operational, project execution, planning, resources, documentation, vendor issues, etc. The Sr. Advisor serves as the subject matter experts of portfolio risk activity and their analysis is the foundation for routine, accurate, insightful data insights. Routine insights produced weekly, monthly, quarterly, and ad hoc.
The Sr. Advisor administers a quarterly PMO audit of portfolio projects, as well as responding to several enterprise-wise audit findings from internal or external auditors. The Sr. Advisor is also responsible for coordinating business continuity and disaster recovery efforts across and between the Association and ITS. Additionally the Sr. Advisor works on special assignments involving data analysis and issue/cause identification. The individual works with PMs and the PMO to inject rigor into project risk/issue identification. S/he also plays a significant role in the annual planning activities as part of the PPM team and helps to level portfolio work accordingly.
The Sr. Advisor is expected to demonstrate significant depth of expertise in portfolio management, information technology and enterprise risk management planning and execution. Additionally, the Sr. Advisor is expected to demonstrate One AARP cultural attributes and behaviors in all interactions. Individual should be a self-starter, consummate team player, and customer-service focused.
Functional / Technical Responsibilities
- Develop, implement and manage portfolio and enterprise risk management to ensure thorough and robust approach to monitoring, evaluating and managing information technology risks across the enterprise.
- Identify potential information technology risks and assess impact, probability of occurrence and timeframe.
- Develop standard framework to assess the relative scope and magnitude of risks.
- Develop, implement and monitor approach for evaluating risks, including defining risk categories, tolerances and weighting.
- Generate routine analysis and insights using raw and multiple data sources via Excel, as well as author requirements for report development.
- Consult with the IT Operations group to ensure the establishment of disaster recovery testing methodologies; the planning and coordination of the testing of recovery support and business resumption procedures in different functional areas.
- Assure recovery procedures are effective for the restoration of key resources and for the resumption of critical business processes.
- Provide guidance and subject matter expertise regarding information technology risks and mitigation planning to colleagues across the organization.
- Integrate IT and enterprise-wide risk management activities with the Chief Ethics and Compliance Officer and staff.
- Provide assurance over relationships with external product and service providers.
- Ensure AARP business activities and IT operations are in compliance with applicable AARP policies and/or regulatory requirements.
- Identify and address risks associated with the use of the technology services provided by ITS.
- Share knowledge and develop staff capabilities to strengthen understanding of IT and Enterprise industry and business issues and best practices; evaluate implications to ITS.
- Build organizational talent by creating a learning environment that ensures employees realize their highest potential.
Relationship Management
- Work in partnership with ITS Senior Leadership and AARP Leadership on strategic initiatives related to information technology and enterprise risk management to continuously improve policies, standards and procedures by anticipating issues, providing advice and sharing knowledge and best practices.
- Communicate regularly with functional and IT leaders to ensure enterprise alignment and support.
Required Competencies
- Risk Management
- COBIT
- FMEA
- RCCS
- Business Process Management
- Business Needs Analysis
- Change Management
Candidate Qualifications:
- This position requires knowledge and experience in Enterprise Risk Management and the Risk Assessment process.
- Qualified candidates will have outstanding interpersonal skills, strong analytical abilities, and a high degree of self-motivation to pursue leadership opportunities.
- Experience in IT service environment essential
- Leadership experience and time with a Big 4 consulting firm is preferred but not required.
AARP offers competitive benefits with a 401K, 100% company funded pension plan, health, dental, vision and life insurance, STD/LTD, paid vacation and sick, and other benefits.
AARP is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. AARP does not discriminate on the basis of race, ethnicity, religion, sex, color, national origin, age, sexual orientation, gender identity or expression, mental or physical disability, genetic information, veteran status, or on any other basis prohibited by applicable law.