Infrastructure Risk Partner Lead

Infrastructure Risk Partner Lead

We are seeking a proactive and experienced Infrastructure Risk Partner Lead with strong expertise in network, compute, and storage risk management. This is a strategic, advisory role focused on consulting with teams to identify and mitigate infrastructure risks, manage projects and portfolios, and translate technical security concepts into accessible, business-friendly language. This requires strong stakeholder management skills with the ability to lead cross-functional initiatives.

Position Responsibilities:

• Risk Advisory & Control Documentation: Work with infrastructure teams to document security controls clearly and accurately, ensuring compliance with corporate policies, corporate standards, and industry standards like NIST CSF, ISO 27001, PCI DSS, SOX, GLBA, and GDPR.
• Risk Tracking & Closure: Oversee and manage the risk closure process, ensuring risks are properly identified, tracked, and resolved.
• Translation & Communication: Bridge the gap between technical teams and auditors/regulators by helping teams translate complex technical implementations into comprehensible documentation.
• Collaboration & Partnership: Collaborate with IT, security, and compliance teams to integrate risk management practices across infrastructure domains.
• Continuous Improvement: Identify opportunities to enhance control effectiveness through insights gained from audits, assessments, and industry best practices.

A successful candidate will have the following knowledge and/or skills:

• Experience in designing / assessing infrastructure security controls across network, compute, and/or storage environments.
• Practical knowledge of security frameworks like NIST CSF, NIST 800-53, PCI DSS, and ISO 27001.
• Familiarity with cloud platforms (AWS, Azure, GCP) and modern infrastructure technologies.
• Strong communication skills with the ability to convey technical concepts to non-technical audiences.
• Relevant certifications such as CISM, CISSP, or CRISC are a plus.
• Experience in infrastructure risk management with a focus on network, compute, and storage environments.
• Demonstrated knowledge of banking industry products, services, and workflows.
• Strong familiarity with critical business processes and controls, as well as overall business needs and objectives, for the Line of Business.
• Strong track record of driving timely and effective issue resolution in a financial services context.
• Deep expertise and ability to educate colleagues on risk management, controls, and compliance concepts, frameworks, and policies.
• Ability to establish authority, influence stakeholders, and productively debate issues (e.g., credible challenge) at all levels including without direct reporting responsibility.
• Ability to build strong relationships and engage constructively in a proactive and transparent approach with cross-functional stakeholders, to challenge status quo and drive buy-in to achieve common goals.
• Ability to clearly and effectively communicate, including ability to summarize and explain complex findings and issues to a wide range of audiences.
• Ability to apply sound judgment and appropriately escalate concerns and issues.
• Ability to demonstrate managerial courage and inspire colleagues across the organization to embrace change.
• Ability to gather, analyze and interpret large datasets from various sources.
• Strong analytical and critical thinking skills with high attention to detail and accuracy.
• Ability to manage multiple tasks and projects, prioritize work, meet deadlines, achieve goals, and work under pressure in a dynamic and complex environment.
• Self-starter, able to work independently, flexible and can navigate a complex organization.

Position Qualifications:

• Bachelor's Degree from an accredited university or a High School Diploma or GED and 6 years of Risk Management or other related experience in the Financial Services Industry
• 6 years of experience in Risk Management, Compliance, Audit, or related field
• Expertise in identifying areas of control weakness
• Expertise in designing or advising on the design of a broad range of controls (e.g. preventative vs. detective controls; manual vs automated)
• Strong understanding of various risk types/pillars, risk management, controls, and compliance concepts and frameworks
• Project support/project management skills - ability to provide direction, track progress and ensure alignment with program requirements
• Proficient in risk management software, MS Office Suite, and other related technology tools

About Comerica
We know our employees are critical to our overall success and we are dedicated to investing in their future. One of the ways we do this is to offer a comprehensive Total Rewards package designed to recognize and reward individual performance, as well support health, well-being, development and security for our colleagues and their family. Total Rewards consists of cash compensation, development and flexible benefit programs designed to meet individual needs today and in the future. Your salary will be commensurate with your work experience and our programs are reviewed regularly to ensure each remain competitive. We are proud to offer benefits such as health and welfare programs, strong retirement benefits, and generous paid time off programs. You and your eligible family members, including domestic partners and their children, can participate in medical, dental, and vision benefits, 401(k) and pension, income protection benefits such as life insurance, AD&D, and supplemental health programs to offset unexpected health care expenses. We also have a variety of time off programs for things like vacation, sick time, disability, and parental leave. Eligibility for some programs varies based on employment status and tenure.

Upon offer, Comerica conducts a comprehensive background and fingerprint check.

NMLS certification requirement: where applicable, a favorable background check screening, credit check, fingerprint check, and NMLS certification is required in accordance with the SAFE Act.

Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, and strategically aligned into three major business segments; the Commercial Bank, the Retail Bank, and Wealth Management. Comerica's colleagues focus on relationships, and helping people and businesses be successful. In addition to Texas, Comerica Bank locations can be found in Arizona, California, Florida and Michigan, with select businesses operating in several other states, as well as in Canada and Mexico.

Comerica is proud to be an Equal Opportunity Employer - veterans/individuals with disabilities, committed to workplace diversity.