Senior Risk Associate, Technology & Cyber Risk

What you'll do

• Manage the full lifecycle of technology and cyber risk assessments from identification to remediation.
• Evaluate compliance against internal standards and external regulations, influencing policy updates.
• Perform root cause analysis on recurring issues to identify systemic vulnerabilities.
• Engage project teams early to integrate IT standards into system changes before implementation.
• Serve as a point of contact for internal and external audit engagements, coordinating remediation responses.

What we're looking for

• At least 3 years of experience in Technology or Cybersecurity risk management.
• Deep understanding and application of technology and cyber controls to mitigate business risks.
• Experience in performing Control Self Assessments (CSA) and Risk and Control Self Assessments (RCSA).
• Strong project management, communication, and analytical skills for data-driven solutions.
• Certification in cybersecurity or information systems such as CISSP, CISA, CRISC, or CISM.
• Ability to engage stakeholders early in projects to integrate IT standards and audit procedures.
• Experience in analyzing diverse datasets to inform risk policies and monitor threat environments.