Principal Technology Risk

What you'll do

• Perform proactive risk and control assessments for technology, financial, reputational, and regulatory risks.
• Monitor technology controls and oversee the documentation and execution of remediation plans.
• Provide risk and controls consulting for key initiatives and emerging technology activities.
• Lead in-depth risk assessments for cloud modernization programs and strategic business capabilities.
• Identify systematic risk themes and emerging threats to communicate insights to senior leadership.
• Perform data analysis using automated tools to identify potential exposure from control weaknesses.
• Liaise with internal and external audit teams to track findings and resolve outstanding issues.
• Provide tactical and strategic guidance on risk initiatives and incidents to legal, risk, and compliance teams.

What we're looking for

• 6+ years’ experience in information technology risk, cyber security, controls, or audit roles.
• Experience leading technology risk assessments, control assessments, IT audits, or implementing cybersecurity controls for large scale financial service organizations.
• Strong knowledge of cloud native architectures, container platforms, CI/CD pipelines, application security, and database management platforms.
• Proven ability to communicate complex technology, risk, and operational risks to senior leadership and executive audiences.
• Knowledge of artificial intelligence, machine learning, LLM, data science, and Robotic Process Automation (RPA) tools.
• Bachelor’s Degree in computer science, information technology, cybersecurity, engineering, or a related field of study (preferred).
• Professional technology risk certifications (CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) (preferred).
• Strong analytical, problem solving, and critical thinking skillset with the ability to assess risk and influence decision making.