Job responsibilities
- Assist in monitoring technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
- Collaborate with stakeholders to develop and implement risk mitigation strategies, controls, and action plans for technology-aligned processes
- Monitor and evaluate the effectiveness of implemented controls, contribute to the recommendations for improvements and addressing gaps in risk management
- Communicate risk-related findings and updates to relevant stakeholders, ensuring alignment with organizational objectives and risk appetite
- Articulate and share clear, concise complex technical findings to management in understandable terms.
Required qualifications, capabilities, and skills
- 2+ years of experience or equivalent expertise in technology risk management, information security, or a related field
- Proficient in risk identification, assessment, and control evaluation, with a strong understanding of industry standards
- Demonstrated ability to analyze complex issues, develop risk mitigation strategies, and communicate effectively with stakeholders
- Exposure to risk management frameworks, regulations, and industry best practices
- Hands on experience with risk and controls ecosystem (ITRC, FARM, CORE, etc.) ensuring company-wide standards are met and risk is registered in the appropriate ecosystems.
- Hands on experience with security, vulnerability management, and configuration management.
- Strong experience with AGILE development practices, JIRA, confluence. Creation of JIRA/Confluence dashboards.
- Experience interacting with auditors (2nd line, 3rd line, PCI, regulators, etc.) and delivering quality audit responses.
- Relevant experience in technology infrastructure environments.
Preferred qualifications, capabilities, and skills
- CISM, CRISC, CISSP, or other industry-recognized risk certifications
- Strong attention to detail and managing to deadlines.