AVP Operational & Technology Risk Management

Tidal Financial Group

16h•$95,000 - $140,000

About The Position

Tidal’s Assistant Vice President of Operational & Technology Risk Management is a multidisciplinary role contributing to the delivery and management of the company’s AI-driven Program target state. The AVP applies operational and technology risk expertise and technical capabilities to use automation and AI in support of an integrated Program that improves the efficiency and value of its processes and reporting. The role covers operational risk management, Risk and Control Self-Assessment (RCSA), technology and cybersecurity risk, third-party risk, and change management risk. Reporting directly to the VP of Risk Management, the AVP brings a passionate, entrepreneurial, and disciplined approach to maximizing the Program’s contribution and value as Tidal grows and becomes more operationally complex.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Electrical/Computer Engineering, Computer Science, Risk Management, or a related technical discipline.
At least 5 years of relevant experience in operational risk, technology and cybersecurity risk, third-party risk, IT audit, or internal controls within asset or investment management, ETF platforms, or broader financial services.
Working knowledge of operational and technology risk frameworks and standards such as COSO, COBIT, NIST, or ISO.
Experience designing, implementing, or leading an RCSA program, including methodology development, risk and control taxonomies, inherent and residual risk scoring, assessment scoping, evidence review, control evaluation, and governance reporting.
Experience using automation, AI, data analytics, and data visualization to improve risk identification, assessment, monitoring, RCSA execution, workflow management, dashboards, and reporting.
Exceptional written, verbal, facilitation, and interpersonal skills, including the ability to translate complex operational and technology risks into clear decisions, provide credible challenge, and influence stakeholders in a fast-paced, high-growth environment.

Nice To Haves

Relevant professional certifications such as CISA, CRISC, CISSP, or CIA.

Responsibilities

Build and manage an enterprise-level Operational Risk Management program across all funds, identifying and assessing operational, technology, cybersecurity, third-party, fraud, people, legal, and model risks, along with related controls and risk appetite limits.
Build and manage an RCSA program to identify, evaluate, and score operational risks and the effectiveness of mitigating controls; test controls periodically using a risk-based approach and defined calendar; and remediate control gaps through documented corrective action plans.
Use automation and AI to improve RCSA efficiency and consistency, including generating process flows, designing and automating controls, and testing and assessing control effectiveness.
Ensure detailed procedures and key controls are documented and executed across Tidal.
Build and manage a Technology and Cybersecurity Risk Management program providing independent risk oversight and constructive challenge across technology governance, cybersecurity, cloud and infrastructure, identity and access management, data, software development and change, artificial intelligence, and system resilience.
Collaborate with the Technology & Operations department to increase automation and AI use for real-time risk sensing and anomaly detection of emerging technology and cybersecurity threats.
Build and manage a comprehensive third-party risk management program covering vendors, service providers, counterparties, and brokers throughout the lifecycle, including due diligence, risk tiering, contracting, ongoing monitoring, issue and control management, and exit planning.
Assess third-party operational, technology, cybersecurity, financial, regulatory, reputational, and concentration risks, and confirm contingency plans address material dependencies.
Build and manage a Change Management Risk program covering material organizational or process changes, new products, systems, and vendors; confirm mitigations and controls are implemented and tested, issues resolved, and operational readiness completed before implementation.
Update affected RCSAs when the risk or control environment changes.
Support Issue & Incident Management and Business Continuity Plan programs by identifying control breakdowns and helping design enhanced controls and processes to prevent recurrence.
Support the design and implementation of Risk Intelligence data and reporting using automation, AI, and visualization tools to deliver efficient, data-driven insights, predictive analytics, and forecasts for proactive risk-informed decisions.
Serve as a trusted cross-functional partner, providing balanced challenge, thoughtful insights, and practical recommendations.