Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management. 

 

As a Tech Risk & Controls Lead in Risk Management & Controls, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

 Job responsibilities:

Serve as a key point of contact for the Firmwide Resiliency Office quality team, attend related forums, manage quality findings and resolution, cascade information and best practices, and accountable for any Enterprise Technology deliverables 

Stay up to date on process, procedure, and regulatory changes, ensuring ET Business Resiliency leads are aware of and integrating into plans and testing conclusion records 

Collaborate with cross-LOB/CF teams to determine opportunities for further uplift for the overall program 

Monitor the implementation of actions to be taken, ensuring timely execution and adherence to established timelines 

Determine areas of risk and/or frequent areas of issue, prioritize actions to bring overall program uplift 

Develop and deliver insights to management, highlighting themes, areas of opportunity, and progress updates

Maintain clear and open communication channels with stakeholders, ensuring transparency and fostering a collaborative environment

Develop and maintain key contacts and working relationships with various areas within Enterprise Technology, Controls peer groups, and Firmwide Resiliency

Ensure timely escalation of key risks and issues to management and interested stakeholders

 

Required qualifications, capabilities, and skills:

5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigationFamiliarity with risk management frameworks, industry standards, and financial industry regulatory requirementsProficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategiesDemonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives

Self-motivated and confident decision-maker with the ability to lead, challenge and influence change where necessary

Synthesizes data quickly and communicates analysis succinctly and professionally

 

Preferred qualifications, capabilities, and skills:

CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred

Minimum BS or equivalent level of education/experience preferred

7+ years in relevant business role, operations management, project/program management, or governance

Ability to maintain professional documentation for internal and external reporting purposes

Demonstrated knowledge/background in business resiliency

 

 

#CTC