The Director of Application & Data Technology Risk leads a senior team in identifying and managing technology risks across the enterprise application landscape, focusing on secure design, SDLC controls, data risk assessment, and AI exposure. This role involves partnering with CIOs and senior leaders to ensure risks are aligned with business priorities and regulatory expectations while enabling modern application delivery. Key responsibilities include providing oversight throughout the software development lifecycle, evaluating risks associated with cloud dependencies and emerging technologies like AI, and communicating complex technical risks in a business-relevant manner. The ideal candidate has over 10 years of experience in technology risk management, strong knowledge of application architectures and DevOps practices, and expertise in assessing data and AI-related risks. They should also be familiar with industry frameworks such as NIST and CIS Controls, and possess excellent communication skills to influence prioritization decisions at the executive level.
Skills
DevOps
CI/CD
SDLC
AI
GenAI
Cloud-Native Services
Agile Delivery
Infrastructure as Code
Terraform
AWS
Azure
Google Cloud Platform
Kubernetes
Docker
PostgreSQL
MongoDB
CIS Controls
NIST
COBIT
Python
JavaScript
Java
CI/CD Pipelines
APIs
Identity and Access Management
Logging and Monitoring
Network Security
Encryption
Resiliency
What you'll do
Lead identification and management of application-level technology risks throughout the SDLC.
Provide risk oversight across the entire application lifecycle from requirements to production support.
Evaluate data risks and sensitive data exposure within applications to prevent unauthorized access and leakage.
Maintain awareness of AI adoption risks, ensuring they are incorporated into application risk assessments.
Serve as a trusted risk advisor to CIOs, translating technical risks into clear business narratives.
What we're looking for
10+ years of experience in technology risk management, application security, IT audit, engineering.
Strong knowledge of application architectures, SDLC, DevOps practices, and CI/CD pipelines.
Experience assessing data risks and exposure within applications.
Understanding of AI and automation risks including model governance and control considerations.
Familiarity with cloud and infrastructure controls (IAM, logging, encryption, network security).
Ability to communicate technical issues effectively to senior leaders.
Experience working with industry frameworks like NIST, CIS Controls, COBIT.
Market check
Salary context
This
$153,600–$230,400
range sits above
52%
of similar postings on FindRole.
Peer median band
$148,250–$222,500
Median floor and ceiling across peers.
Typical midpoint (25–75%)
$145,700–$226,287
Middle half of comparable postings.
Based on 238 comparable postings.*
* 240 is the maximum number of comparable postings sampled.
Employer
About The Hartford
The Hartford is a leading provider of property and casualty insurance, group benefits, and mutual funds, serving businesses and individuals across the United States. Industry: Insurance & Financial Services
The Hartford currently has
60 open roles
on FindRole.
Listed pay typically runs
$126,880–$190,320
across 60 roles with salary data.