Opportunity to shape risk culture and ensure technological safeguards in a dynamic, collaborative environment.
As a Tech Risk Assurance Lead in Cyber and Tech Controls line of business covering the Network and End User Compute products, you will lead expert technical risk assurance and control oversight to ensure the firm's products and lines of business achieve their objectives while effectively managing risk. Utilizing your background in technology risk management, you will work with cross-functional teams to identify, assess, and mitigate emerging risks and vulnerabilities. Your tactical and strategic decision-making will significantly impact the firm's operations, financial management, and public image. You will play a crucial role in fostering a robust risk culture and catalyzing continuous improvement, contributing to the development and implementation of comprehensive risk management policies, standards, and controls.
Job responsibilities
Lead comprehensive risk assessments to identify potential threats and vulnerabilities in the Firm's processes, systems, and operations, developing risk mitigation strategies. Advise stakeholders on risk management, controls development, and adherence to mitigate risks. Proactively monitor key risk indicators, analyze control metrics, and offer insights on risk management effectiveness to senior management, driving continuous improvement initiatives. Engage with regulators, clients, and stakeholders on risk-related issues, providing necessary oversight and ensuring compliance with laws, regulations, and internal policies. Required qualifications, capabilities, and skills
Experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation. Extensive knowledge of network and end user compute protocols, technologies, applicable risks, and controls. Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR). Proficiency in data security, risk management & controls, security governance, and analytical thinking, with a track record of implementing effective risk mitigation strategies. Advanced knowledge of data analytics and data literacy. Preferred qualifications, capabilities, and skills
Certified Risk and Information Systems and Controls (CRISC) certification.
#J-18808-Ljbffr
Lead comprehensive risk assessments to identify potential threats and vulnerabilities in the Firm's processes, systems, and operations, developing risk mitigation strategies. Advise stakeholders on risk management, controls development, and adherence to mitigate risks. Proactively monitor key risk indicators, analyze control metrics, and offer insights on risk management effectiveness to senior management, driving continuous improvement initiatives. Engage with regulators, clients, and stakeholders on risk-related issues, providing necessary oversight and ensuring compliance with laws, regulations, and internal policies. Required qualifications, capabilities, and skills
Experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation. Extensive knowledge of network and end user compute protocols, technologies, applicable risks, and controls. Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR). Proficiency in data security, risk management & controls, security governance, and analytical thinking, with a track record of implementing effective risk mitigation strategies. Advanced knowledge of data analytics and data literacy. Preferred qualifications, capabilities, and skills
Certified Risk and Information Systems and Controls (CRISC) certification.
#J-18808-Ljbffr
