Senior Manager Technology Risk

Ameriprise•Minneapolis, MN

5d•Hybrid

About The Position

The Senior Manager, Technology Risk is a Second Line of Defense (2LOD) role reporting to the VP, Technology Risk Office. Responsible for leading technology and cyber risk oversight activities across assigned business areas, providing independent review and credible challenge of technology risk management practices, and supporting adherence to enterprise risk management standards. This role partners closely with Technology, Information Security, and business leaders to identify, assess, and mitigate risk while fostering a strong risk culture across the organization.

Requirements

Bachelor's degree or equivalent experience required.
7–10+ years of experience in technology risk, cyber risk, operational risk, audit, information security, or related discipline.
Strong knowledge of IT operational processes, technology controls, cybersecurity practices, and risk management frameworks.
Working knowledge of NIST, COBIT, ISO27000, FFIEC, and related regulatory standards.
Ability to independently assess risk exposures and provide effective challenge.
Strong analytical and problem-solving skills.
Ability to influence stakeholders across multiple levels of the organization.
Strong written and verbal communication skills.
Experience utilizing GRC/eGRC platforms and reporting tools.
Ability to manage multiple priorities and work independently.
Applicants must have a valid work authorization that does not now, or in the future, require visa sponsorship for employment in the United States (e.g., H-1B, F-1 CPT, F-1 OPT, TN).

Nice To Haves

Advanced degree preferred.
CISA, CRISC, CISSP, Other relevant risk or security certifications

Responsibilities

Lead risk oversight activities for assigned technology and cyber domains.
Provide credible challenge to first line risk management practices, ensuring alignment with enterprise standards.
Identify emerging risk themes and escalate concerns appropriately.
Support governance forums and risk committees through preparation of materials, risk reporting, and follow-up actions.
Lead execution and review of Risk and Control Self-Assessments within assigned areas.
Challenge risk and control assessments to ensure completeness and consistency.
Support implementation and ongoing enhancement of ORM methodologies and standards.
Review and challenge management responses to technology and cyber risk events.
Ensure issues are appropriately documented, escalated, and remediated.
Analyze trends and recommend proactive actions to reduce future risk exposure.
Assess technology and business changes for potential risk impact.
Partner with stakeholders to evaluate controls associated with significant initiatives and transformations.
Support governance processes related to strategic technology change.
Develop risk reporting, dashboards, and management information.
Analyze risk trends and provide insights to support decision-making.
Recommend improvements to risk management practices, reporting, and monitoring capabilities.
Serve as a subject matter expert and trusted advisor to business and technology stakeholders.
Mentor junior team members and provide guidance on risk methodologies and best practices.
Contribute to team initiatives, process improvements, and strategic objectives.