Tech Risk and Controls Lead
About The Position
As a Tech Risk & Controls Lead in Corporate Technology, you will identify and mitigate compliance and operational risks in line with the firm’s standards. You will provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that controls operate effectively and comply with regulatory, legal, and industry standards. In partnership with Product Owners, Business Control Managers, regulators, and other stakeholders, you will contribute to reporting a comprehensive view of technology risk posture and its business impact. The role calls for advanced knowledge of risk management principles, practices, and theories, and the ability to drive innovative solutions and manage a diverse team in a changing risk landscape. The role includes using enterprise-authorized AI capabilities to support risk and controls work, while validating AI-generated outputs and following data sensitivity, security, auditability, and regulatory requirements. It also involves reporting and governance of controls, policies, issues, and measurements, as well as monitoring control effectiveness and recommending improvements.
Requirements
- At least 5 years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, focused on regulatory compliance and risk mitigation.
- Demonstrated experience using enterprise-authorized AI capabilities in the work environment to support technology risk and controls workflows, with strong validation practices and awareness of data sensitivity.
- Ability to review and validate AI-assisted risk summaries and recommendations before use, escalate when uncertain, and ensure alignment with security, auditability, and regulatory expectations.
- Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements.
- Proficient knowledge of data security, risk assessment and reporting, control evaluation, design, and governance, with a record of implementing effective risk mitigation strategies.
- Ability to influence executive-level strategic decision-making and translate technology insights into business strategies for senior executives.
- Familiarity with software development best practices.
- Understanding of information and technology asset management and data management processes.
Nice To Haves
- CISM, CRISC, CISSP, CISA, or similar industry-recognized risk certifications.
- Application Owner experience.
Responsibilities
- Identify, quantify, communicate, and manage technology risk, focusing on root cause analysis and recommendations for resolution.
- Use enterprise-authorized AI capabilities to synthesize risk and control evidence and draft executive-ready reporting; validate outputs and handle data according to sensitivity and security requirements.
- Build and maintain trusted relationships with line-of-business technologists, assessment teams, and data officers to support collaboration and shared goals.
- Execute reporting and governance of controls, policies, issue management, and measurements, providing senior management with insights into control effectiveness and informing governance work.
- Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.
- Promote reuse-first, AI-assisted approaches to recurring control testing and issue/action-plan management, ensuring human review and alignment with auditability and regulatory expectations.
Benefits
- Competitive total rewards package, including base salary determined by role, experience, skill set, and location.
- Eligible roles may receive commission-based pay and/or discretionary incentive compensation in cash and/or forfeitable equity.
- Comprehensive health care coverage.
- On-site health and wellness centers.
- Retirement savings plan.
- Backup childcare.
- Tuition reimbursement.
- Mental health support.
- Financial coaching.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
