below marketmost similar roles pay hereabove market
This role pays less than
75%
of similar roles. Most pay
$165,679–$223,750
— the blue band above.
At the midpoint, this role pays about
$166k
versus about
$195k
for comparable roles.
Based on 240 similar postings.
Employer
About T. Rowe Price
T. Rowe Price is an asset management firm focused on delivering global investment management excellence and retirement services
T. Rowe Price currently has
36 open roles
on FindRole.
Listed pay typically runs
$121,000–$206,000
across 36 roles with salary data.
JOB TITLE: Senior Manager, Technology & Cyber Risk Management
The Senior Manager, Technology & Cyber Risk Management joins the AI, Model and Technology risk team within the Chief Risk Officer organization. This second-line role provides independent oversight and credible challenge regarding technology, cyber, cloud, data, third-party, resilience, and AI-related risks across the enterprise. You will lead risk assessments, control reviews, and thematic deep dives while managing incident programs for technology, cyber, data, and AI events. Key responsibilities include developing risk reporting, KRIs, and dashboards while enhancing risk frameworks and policies. You must utilize knowledge of NIST CSF 2.0, NIST 800-53, ISO 27001/27002, COBIT, COSO, FFIEC guidance, and OWASP Top 10 for Large Language Model Applications. The role ensures compliance with financial services regulatory expectations for operational resilience and data governance.
Provide second-line oversight and credible challenge for technology, cyber, cloud, and AI-related risks across the enterprise.
Lead risk assessments, control reviews, and thematic deep dives for major technology and AI-enabled initiatives.
Manage the AI, model, and technology incident program to ensure timely reporting, root cause analysis, and remediation.
Develop risk reporting, Key Risk Indicators (KRIs), and dashboards to provide senior leaders with clear insights into risk trends.
Enhance technology and AI risk frameworks, policies, standards, and governance routines to align with regulatory expectations.
Monitor regulatory developments, industry threat trends, and audit findings to inform second-line oversight priorities.
Partner with internal stakeholders to drive consistent risk coverage and effective remediation of technology and data risks.
What we're looking for
Typically requires 8+ years of relevant experience in technology risk, cyber risk, information security, technology audit, operational risk, or related financial services risk disciplines.
Bachelor’s degree or equivalent combination of education and experience in IT, cybersecurity, computer science, engineering, risk management, finance, or business.
Advanced degree preferred.
Experience providing independent risk oversight, credible challenge, risk advisory, or assurance for technology, cyber, cloud, third-party technology, or AI-enabled processes in a complex, regulated environment.
Ability to synthesize complex technical and risk issues into clear executive-ready narratives, dashboards, committee materials, and recommendations.
Strong stakeholder management, analytical, communication, and prioritization skills, including the ability to influence outcomes without direct authority.
Relevant certifications preferred, such as CISSP, CISM, CISA, CRISC, CGEIT, cloud security certifications, or AI governance/risk credentials.
Strong understanding of the three-lines-of-defense model and knowledge of technology and cyber risk domains including cloud, data protection, and AI risk management.