Associate, Technology, Risk and Controls

HarbourVest Partners • Boston, MA

10d • Hybrid

About The Position

HarbourVest Partners is hiring a Technology Risk & Control Associate to enhance Identity Governance processes, support regulatory compliance, manage risks, and maintain governance policies. The role includes building automation for Identity Management governance, supporting the Technology Risk and Control program, and establishing frameworks to safeguard systems and sensitive information. The Associate will also help develop risk management strategies and participate in due diligence processes.

This role supports cybersecurity initiatives in a global financial services firm. The successful candidate will help strengthen cybersecurity governance, mitigate risk, and protect the firm’s reputation while working collaboratively across the organization.

The position uses a hybrid work arrangement. Employees receive 18 remote workdays per quarter at their discretion, subject to manager approval. The base salary range is $95,000–$100,000, and the role is eligible for a discretionary annual bonus. The total rewards package may include retirement contributions, health insurance, income protection, paid time off and leave benefits, and well-being programs; eligibility varies by position and geography.

Requirements

• Demonstrable experience in the financial services industry and an understanding of its security challenges and regulatory requirements.
• Ability to learn new skills and apply them to automation projects.
• Ability to support the development and implementation of cybersecurity policies and procedures aligned with industry guidelines and regulatory requirements.
• Clear and effective communication skills for explaining cybersecurity concepts to technical and non-technical collaborators.
• Proactive approach to staying current on cybersecurity trends and threats.
• Ability to build and maintain positive relationships with external auditors, regulators, and other collaborators.
• Bachelor of Science in Computer Science, Information Security, or equivalent work experience.
• Certified Information Security Manager (CISM) certification required within one year of employment.
• 1–2 years of relevant work experience.
• Strong ethical standards, honesty, and transparency.
• Results-oriented, accountable, outspoken, and collaborative approach.
• Ability to use data to inform business decisions and report on metrics.
• Familiarity with working at a company with a global presence spanning multiple time zones.
• Ability to work independently, prioritize tasks and time effectively, and take initiative to address potential issues.
• Ability to lead high-visibility and critical security projects.

Responsibilities

• Develop automation for Identity Governance in support of external audits and internal governance controls.
• Own the development and maintenance of cybersecurity policies, standards, and procedures to ensure compliance with industry regulations and guidelines.
• Lead regular risk assessments and audits to identify potential threats and vulnerabilities and help develop mitigation strategies.
• Collaborate with Legal, Compliance, and Enterprise Risk teams to integrate cybersecurity initiatives across the organization.
• Monitor and report on cybersecurity program effectiveness, including key performance indicators and metrics.
• Stay informed about cybersecurity trends, threats, and regulatory requirements, and support implementation of relevant updates.
• Help manage relationships with external auditors, regulators, and other collaborators to support compliance with relevant laws and regulations.
• Support the Technology Risk and Control program and establish governance frameworks to safeguard systems and sensitive information.
• Assist in developing risk management strategies and participate in due diligence processes.

Benefits

• Discretionary annual bonus based on individual and overall firm performance.
• Retirement contributions.
• Health insurance.
• Income protection.
• Paid time off and leave benefits.
• Well-being programs.
• Long-term reward program participation may be available for more senior-level roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level