Technology Risk Analyst

Fidelity Investments • Merrimack, NH

1d • Hybrid

About The Position

The Enterprise Technology Risk group is seeking a passionate and driven professional to contribute to the Fidelity Brokerage and Wealth Technology Risk team. Specific responsibilities include the identification and monitoring of controls, proactive and new product risk assessments, compliance with existing and emerging regulatory requirements, and supporting internal and external audit activity (e.g., SOC 1) and IT General Controls (ITGC). In addition, there will be opportunities to support ad-hoc strategic projects and requests from our Operational Risk partners.

Requirements

• 2 years in Risk, Compliance, Information Security, Information Technology, Controls or Audit roles
• Bachelor’s degree or equivalent experience in Computer Science, Risk Management and Assurance, Cyber Security, or a related field of study
• Technical capabilities across multiple areas (e.g., technology infrastructure and application controls, production support, cybersecurity, access management, network and cloud, resiliency, etc.)
• Knowledge of current software and technology trends leveraged by Technology (e.g., Azure, AWS, Application Lifecycle Mgmt. Software, SaaS)
• Proven record of analyzing and/or supporting risk programs
• Ability to communicate risk programs to external auditors and regulators
• Demonstrated risk management knowledge and experience, including risk assessment and control evaluation
• Strong problem-solving and critical thinking abilities
• Clear and direct written and oral communication skills
• Ability to build strong relationships and influence partners

Nice To Haves

• Professional technology risk certification or curiosity about perusing (e.g., CISSP, CISA, CRISC, CISM)

Responsibilities

• Support BU risk management functions, including control testing, risk and control consulting, management reporting, and dedicated risk support
• Perform assessments of technology risk and controls for applications, platforms and services
• Assist in the support of internal corporate audit and annual SOC 1, SOC 2, and other external audits by identifying new applications, performing ITGC assessments, and managing exceptions
• Establish ongoing cadence to measure and report on the effectiveness of controls

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 101-250 employees