Technology Risk Lead

Harris Williams•Richmond, VA

1d•$160,000 - $185,000•Onsite

About The Position

Harris Williams is a global investment bank specializing in M&A and private capital advisory services. Clients worldwide rely on us to help unlock value in their business and turn ambitious goals into reality. We approach every engagement with boundless collaboration, pooling expertise and relationships across industries, service offerings, and geographies. For over 30 years, our clients have trusted us to think strategically, execute precisely, and deliver premium outcomes to help them grow. We are ambitious in our goals and steadfast in the belief that clients deserve our very best. To achieve our highest aspiration, we invest in world-class, team-oriented individuals who are smart, driven, and principled – those who are eager to be part of something bigger than themselves. When you join Harris Williams, you are welcomed into a collegial environment where every individual has the opportunity to make an impact in a powerful and significant way. The Role: Within Harris Williams Compliance and Risk team, the Technology Risk Lead will be an integral individual contributor to the IT security team, focused on key programs and initiatives that enable us to effectively identify and reduce risk to the firm. This role will leverage depth in technology risk management to partner across multiple organizations, developing and supporting risk solutions that protect our firm, our clients and our ability to remain a market leader.

Requirements

Degree in information systems, business or related experience.
A clear understanding of requirements, controls, and testing methodologies.
Experience developing an effective control environment related to financial services or technology products and services.
Relevant professional, compliance and/or security certifications (CISA, CRISC, ITIL, CGEIT, PMP).
Ability to work across matrixed teams to effectively balance risks and opportunity costs through prioritization to effectively execute assigned tasks.
5+ years’ experience in IT security and compliance best practices and frameworks (NIST CSF, ISO 27001/9001, COBIT / SOx, PCI, HIPAA).
5+ years’ experience in designing, implementing and managing enterprise-wide risk programs.
High degree of professionalism, organization, proactivity and curiosity.
Excellent interpersonal communication skills and the ability to influence and effectively tailor messages to a variety of audiences.
Passion for technology, operational excellence and a keen focus on ensuring an exceptional client experience.
Candidates must be authorized to work in the U.S. without sponsorship.

Nice To Haves

Access Control (AC)
Building Architecture
Customer Solutions
Disaster Recovery Planning
Information Security
Network Security
Physical Security
Risk Assessments
Security Technologies
Information Assurance
Information Security Audits
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
Knowledge of Organization
Planning: Tactical, Strategic
Industry experience is typically 8+ years.
At least 5 years of prior management experience is typically required.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Responsibilities

Primary lead for all Harris Williams Technology risk and compliance efforts and initiatives, supporting the CTO, CCO and their designees in successful management of the IT risk portfolio and identified priorities.
Manage and track a consolidated program for all interactions between Harris Williams IT/Security and PNC teams (meetings, control schedule, KRIs, assessments, etc.).
Outline strategic roadmap for the Technology Risk program (platforms, people, processes).
Develop deep familiarity with parent company structure, as a liaison with all lines of defense to organize compliance cycles, execute controls and measure performance towards subsidiary risk management objectives.
Continually seek to identify opportunities for improvement and efficiency.
Function as Subject Matter Expert around technology risk and the proper application of technical and procedural risk principles to enterprise IT environments and practices.
Coordinate and lead the firm’s response for IT assessments and inquiries, prepare agendas and materials, record and track action items to closure with Harris Williams IT, parent company counterparts, auditors and regulators.
Evaluate and consult on the risks associated with strategic priorities or major programs and projects, formulating targeted recommendations and guidance.
Collaborate and partner with the business and key stakeholders in creating recommendations to ensure alignment with defined priorities.
Regularly prepare and deliver comprehensive program updates regarding portfolio prioritization, progress, trends and effectiveness.
Establish and maintain technology risk register and related security and compliance maturity frameworks.
Lead the identification, assessment, and prioritization of technology risks across the organization's IT landscape.
Own and lead the lifecycle for IT policy and procedure inventory management.
Focus efforts on key areas of primary broker dealer risks, including security and privacy of firm, employee and client information, data classification, vendors, and AI.
Primary IT risk owner for ensuring all new and renewing vendors are successfully processed through the firm’s vendor risk process.
Partner with the Risk Manager to build a cohesive and effective risk program.

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service.