Senior Technology Risk Assurance Specialist, Services Technology Risk

What you'll do

• Execute technology control testing and assurance activities across various programs, products, and platforms.
• Support compliance audits and engagements for frameworks including PCI DSS, SOC 1, SOC 2, and ISO 27001.
• Assess the design and operating effectiveness of controls in areas like access management, cloud security, and data protection.
• Conduct risk assessments to identify emerging threats and develop practical remediation plans with engineering and product teams.
• Manage audit readiness by coordinating evidence, tracking issues, and validating remediation activities.
• Analyze risk and assurance data to identify trends and systemic weaknesses for process improvement.
• Drive the automation of manual risk management tasks using analytics, AI-enabled solutions, and continuous monitoring.
• Translate complex regulatory requirements into scalable technical controls that engineering teams can implement.

What we're looking for

• Experience in technology risk management, technology audit, information security, compliance, or internal controls.
• Hands-on experience executing assurance activities across frameworks such as PCI DSS, SOC 1, SOC 2, and ISO 27001.
• Knowledge of technical security controls including identity and access management, change management, cloud security, and vulnerability management.
• Ability to understand complex technical architectures and discuss risks with engineering and security teams.
• Experience identifying, assessing, mitigating, monitoring, and reporting technology risks.
• Proficiency in analyzing large data sets to identify trends and translate findings into actionable insights.
• Strong verbal and written communication skills to present complex concepts to both technical and non-technical audiences.
• Demonstrated passion for using automation, AI, and analytics to improve risk management and assurance outcomes.