IT Manager III - SDLC Governance, Risk & Compliance

As the IT Manager III - SDLC Governance, Risk & Compliance (GRC), you’ll lead enterprise-wide System Development Lifecycle (SDLC) governance and help ensure adherence to regulatory, audit, and organizational standards. In this role, you’ll partner with IT, Risk, Security, Audit, and business stakeholders to drive consistency, compliance, and continuous improvement in the delivery of safe, secure, and reliable systems, services, software, and solutions. You’ll foster a collaborative environment focused on lean delivery, operational excellence, and continuous improvement while proactively identifying opportunities to strengthen processes, execution, and quality control.

• Support and enhance the enterprise SDLC 1.0 and 2.0 governance frameworks, standards, processes, and controls, including alignment with Program Development controls (PDs) for SOX applications.
• Oversee SDLC control design, documentation, review, execution, and reporting.
• Partner with Internal Audit, External Audit, and Risk teams to support audits, exams, and risk and control assessments; respond to audit inquiries, provide priority-one audit support, and drive remediation efforts as needed.
• Develop and maintain audit-ready documentation, including control descriptions, procedures, and evidence repositories, and track and report on compliance metrics and control effectiveness.
• Prepare for and attend Technology Review Board (TRB), Architecture Design Review (ADR), and IT Operational Readiness Review (ORR) forums to drive accountability for adherence to SDLC standards.
• Manage and perform SDLC Quality Control Reviews to validate adherence to required processes, release types, deployment patterns, and associated artifacts; identify gaps and drive corrective actions to improve delivery consistency and compliance.
• Establish, monitor, and report KPIs related to SDLC adherence, performance, quality, and control effectiveness.
• Lead the development and deployment of SDLC training programs for IT and non-IT practitioners, employees, and vendors (e.g., LMS/Workday), ensuring training content and supporting tools align with governance requirements and organizational standards.
• Track training completion and support compliance reporting, including manual processes for vendor training attendance tracking.
• Develop and maintain governance artifacts such as standards, procedures, checklists, and tools that are centrally available on the SDLC Hub page; ensure documentation is accessible, standardized, and clearly communicated across teams.
• Continuously evaluate and improve SDLC processes to enhance leanness, efficiency, clarity, automation, and audit readiness, including leveraging AI to educate, enable, assign, measure, and optimize workflow across teams.
• Collaborate with IT and non-IT delivery teams, leadership, Risk, Audit, and vendors to drive adherence to governance practices and procedures and provide guidance and consultative support on SDLC requirements and best practices.
• Communicate roadmaps, updates, expectations, and changes in a clear, professional, and actionable manner.
• Lead cross-functional initiatives related to SDLC governance and compliance, serve as a key point of contact for SDLC-related governance topics across the organization, and mentor team members through onboarding and knowledge transfer efforts.
• Lead and develop a team; responsible for hiring, coaching, performance management, training, and development.

• 7+ years of enterprise IT lifecycle experience, with a focus on SDLC governance, risk, audit, or compliance.
• Bachelor’s degree in related field required.
• Previous leadership experience required.
• Intermediate knowledge of SDLC processes, IT controls, and applicable regulatory frameworks.
• Intermediate knowledge working across cross-functional teams in a highly regulated environment.
• Advanced verbal, written, presentation, and stakeholder management skills.
• Intermediate knowledge and experience in the financial services or banking industry.
• Intermediate familiarity with tools such as Excel VBA, Azure DevOps (ADO), Workfront, Workday LMS, Planview, SharePoint, Confluence, ServiceNow, and supporting connectors and APIs.
• Intermediate knowledge and experience supporting internal and external audits, examinations, and related remediation efforts.
• Intermediate to advanced experience developing, executing, and measuring performance and risk metrics, including summarizing findings in a variety of formats for different audiences.
• Intermediate knowledge and experience using data analytics to identify improvement opportunities and support automation and process optimization within and beyond the SDLC program’s span of control.
• May require up to 25% travel.

We offer all the important things you’d want - like competitive salaries, an ownership stake in the company, medical and dental insurance, time off, a great 401k matching program, tuition assistance program, an employee volunteer program, and a wellness program. In addition, you’ll have the opportunity to bolster your business knowledge, learning the ins and outs of how successful companies operate and manage their finances, giving you invaluable hands-on experience to help grow your career!

Western Alliance Bank, Member FDIC, is a wholly owned subsidiary of Western Alliance Bancorporation. Serving clients nationwide, Western Alliance Bank includes six legacy bank brands - Alliance Association Bank, Alliance Bank of Arizona, Bank of Nevada, Bridge Bank, First Independent Bank and Torrey Pines Bank - that remain part of the company’s heritage, as well as AmeriHome Mortgage, a Western Alliance Bank Company.