Program Manager, Ops Risk

Overview

ABOUT US:

Founded in 1993, Bayview Asset Management is an investment management firm focused on investments in mortgage and consumer credit, including whole loans, asset-backed securities, mortgage servicing rights, and other credit-related assets.

POSITION SUMMARY:

The Operational Risk Program Manager is responsible for planning, coordinating, delivering and providing leadership for our Operational Risk initiatives. This role ensures that risk mitigation programs, including our data protection and privacy initiatives, are effectively designed, implemented, and maintained. This role serves as a critical link between risk management, legal, compliance, IT, security, and business teams to ensure that operational risk, data protection and data privacy requirements are embedded into business processes and technology projects. The candidate should possess experience with evaluating certain technological risks, driving complex projects/initiatives, implementing new technology solutions, developing policies and training materials and developing/tracking related risk metrics, mitigation plans, etc. 

RESPONSIBILITIES:

Program Leadership and Coordination

• Lead and prioritize cross-functional workstreams across IT, Information Security, Legal, HR, Compliance, and business teams.
• Lead and manage the development and execution of risk operations programs, including risk identification, assessment, monitoring and mitigation.
• Maintain comprehensive documentation, including current capabilities and roadmaps for future development.
• Manage end-to-end project lifecycle for risk operations initiatives, including project planning, scope definition, timeline management, stakeholder engagement and reporting.
  
  

Capability Development

• Coordinate and enhance efforts in:
• Data discovery, classification, labeling, retention/disposition.
• Data Loss Prevention (DLP) across egress channels: email, web uploads, cloud platforms, portable media, and printing.
• Deployment of data minimization techniques (de-identification, archival, deletion).
• Implementation of encryption for data at rest and in transit.
• Evaluation and improvement of data governance and protection technologies.
• Partner with IT and security teams to align operational controls with data protection, cybersecurity and resiliency initiatives.
  
  

Technology Implementation & Support

• Collaborate with engineers to implement and adjust rules for discovery and DLP tools.
• Lead implementation and use-case development for Microsoft Purview (DLP rules, content/container labels, retention policies, insider risk management).
• Assess new technologies and ensure they are aligned to program goals and compliant with regulations.
  
  

Policy & Compliance

• Draft, update, and enforce policies, standards, SOPs, and playbooks supporting risk operations, data protection and data privacy objectives.
• Ensure systems are properly configured and operational.
• Support local regulatory compliance through consultations and enforcement measures.
• Respond to risk, data protection and privacy-related inquiries and provide guidance on data handling, notification, and consent mechanisms.
  
  

Training & Awareness

• Develop and deliver training programs to elevate awareness of risk management, data protection and privacy obligations across regions and roles.
  
  

Privacy Impact & Governance

• Support Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new products, services, and workflows.
• Support Privacy by Design principles in collaboration with IT, Engineering, and business units.
• Develop scalable operational procedures for emerging use cases involving personal or sensitive data.
  
  

Measurement & Reporting

• Track metrics and conduct audits to evaluate the effectiveness of data protection and privacy initiatives.
• Report on progress, risks, and dependencies to program leadership and executive stakeholders.
  
  

QUALIFICATIONS:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
• 5 years of experience managing projects or programs in risk management, data protection, data privacy, data governance, or cyber security.
• Experience with project management methodologies
• Experience working in regulated industries and knowledge of regulatory frameworks (e.g., SOX, GDPR, CCPA, FFIEC)
  
  

SKILLS:

• Deep understanding of data protection frameworks, technologies, and compliance standards.
• Proven project management, analytical, and problem-solving capabilities.
• Strong communication and leadership skills, with the ability to engage both technical and non-technical stakeholders.
• Proven experience leading cross-functional programs and managing multiple stakeholders.
• Hands-on experience with industry-leading data protection tools and platforms.
• Proficiency in project management tools (e.g., JIRA, MS Project)
  
  

LOCATION and COMPENSATION:

• This role will be 100% remote
• Base compensation is expected to be $130,000 - $150,000 with the opportunity for incentive compensation including bonus compensation.