Associate, Technology, Risk and Controls

HarbourVest Partners • Boston, MA

11d • $95,000 - $100,000 • Hybrid

About The Position

The Technology Risk & Control Associate at HarbourVest Partners enhances Identity Governance processes and supports regulatory compliance, risk management, and governance policies. The role includes building automation around identity management governance, supporting the Technology Risk and Control program, and establishing frameworks to protect systems and sensitive information. It also contributes to risk management strategies and due diligence processes to help navigate cyber risks and maintain the firm’s reputation.

This position is hybrid. Employees receive 18 remote workdays per quarter for discretionary use, subject to manager approval. The role calls for ethical and transparent conduct, accountability, collaboration, data-informed decision-making, effective work across global time zones, independent prioritization, and initiative in addressing potential issues. The associate will also lead high-visibility security projects in a dynamic business environment.

Requirements

• Demonstrable experience in the financial services industry and understanding of its security challenges and regulatory requirements.
• Ability to learn new skills and incorporate them into automation projects.
• Ability to support development and implementation of cybersecurity policies and procedures aligned with industry guidelines and regulatory requirements.
• Clear, effective communication of cybersecurity concepts to technical and non-technical collaborators.
• Proactive approach to keeping current with cybersecurity trends and threats.
• Ability to build and maintain positive relationships with external auditors, regulators, and other collaborators.
• BS in Computer Science, Information Security, or equivalent work experience.
• Certified Information Security Manager (CISM) certification required within one year of employment.
• 1–2 years of relevant work experience.

Responsibilities

• Develop automation for Identity Governance to support external audits and internal governance controls.
• Develop and maintain cybersecurity policies, standards, and procedures to support compliance with industry regulations and guidelines.
• Lead regular risk assessments and audits to identify threats and vulnerabilities and help develop mitigation strategies.
• Collaborate with Legal, Compliance, and Enterprise Risk teams to integrate cybersecurity initiatives across the organization.
• Monitor and report on cybersecurity program effectiveness, including key performance indicators and metrics.
• Track cybersecurity trends, threats, and regulatory requirements and support implementation of relevant updates.
• Assist in managing relationships with external auditors, regulators, and other collaborators to support compliance.
• Support the Technology Risk and Control program and participate in due diligence processes.

Benefits

• Discretionary annual bonus based on individual and overall firm performance.
• Potential participation in long-term reward programs, typically for more senior-level roles.
• Retirement contributions.
• Health insurance.
• Income protection.
• Paid time off and leave benefits.
• Well-being programs.
• 18 remote workdays per quarter, subject to manager approval.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level