Sr. Manager, Technology Governance & Risk Management

Creative Artists Agency•New York, NY

63d•$180,000 - $200,000•Hybrid

About The Position

As Senior Manager Technology Governance and Risk Management at CAA, you will be tasked with setting the strategic governance and risk management framework to ensure our organization's technology operations adhere to defined internal policies, standards, industry best practices and regulatory/legal requirements while proactively identifying and managing technology-related risks. You will own, drive and assist in the evolution of organization's Technology Governance and Risk Management framework/strategy inclusive of methodology, tools for risk assessment, issue management, monitoring and reporting. This role is ultimately responsible for ensuring CAA Technology and Data adheres to the IT General Controls and Sarbanes-Oxley requirements. The incumbent will provide leadership, execution and management necessary to identify, evaluate, mitigate and manage risk and review. You will challenge and enhance the existing risk management strategy, evolve the existing framework, tools and procedures to achieve effective risk identification and management within best practice IT control frameworks. This role will actively engage with and develop effective, collaborative working relationships across all CAA Tech and Data teams to support cooperative responses to risk management matters, including maintaining effective communication, providing guidance and training to promote risk control awareness, ownership and accountability are critical.

Requirements

Experience / Knowledge of Technology Governance industry standards (NIST, ITIL, COBIT, SOX)
Proven experience in Technology governance, risk management, or compliance roles, preferably in a corporate setting
Strong knowledge of regulatory frameworks, industry standards, and best practices related to Technology Governance
Experience in Risk and Governance Platforms (One Trust, Workiva, etc.…)
Bachelor's degree in Information Technology or Computer Science, or in any related field
8+ years of relevant experience, specifically in performance/risk measurement; direct experience in Technology Risk Management preferred
Excellent problem solving and self-management skills in order to tactically and analytically solve technical problems and successfully handling management information and metrics design, collection, analysis, reports, etc.
Experienced and current in Information Security current affairs, business continuity, data management, security and encryption, and vulnerability analysis and audit
Experience working in orchestration platforms (ServiceNow, Jira)
Ability to manage multiple projects
Self-sufficient, responsible and dependable
Project management skills / methodical and organized
Excellent analytical skills

Responsibilities

Assess/evolve Technology Governance Framework and ensure alignment to regulatory (e.g. SOX) and industry best practices (e.g. COBIT, ITIL) to standardize processes, decision-making, and accountability.
Develop, implement, maintain provide direction and guidance in the development, implementation, and communication of risk-related policies and standards (GDPR, CDPA, etc.)
Provide insight and guidance to Tech policies, standards and processes to ensure risk controls are aligned to framework best practices
Monitor and assess IT compliance with relevant regulations and defined policies
Conduct risk assessments and develop mitigation strategies for IT-related risks.
Coordinate across technology domain leads to manage CAA's controls testing program and ensure alignment with business goals pertaining to compliance, risk, and governance requirements/processes.
Manage IT audits and ensure timely remediation of audit findings.
Implement and manage relevant tools/systems for global Technology organization to support compliance and risk management for IT in the organization.
Provide training and awareness programs on IT governance and compliance topics.
Stay updated on emerging IT governance trends and best practices.
Report on IT governance performance, Key Risk Indicators (KRIs), key compliance KPIs and program maturity to senior management
Coordinate disaster recovery planning and activities across technology departments, and partner with CAA Global Safety & Security to align with companywide business continuity planning efforts
Collaborate with legal and compliance teams to ensure adherence to relevant laws, regulations, and industry standards