AVP/VP, Information & Technology Risk Manager (Third-Party & AI Supply Chain Risk Oversight)
Core
Independent oversight and assurance of technology, third-party, and AI supply chain risks for a sovereign wealth fund.
Role type
Senior IC information technology risk manager (third-party & AI supply chain)
Builds
Risk oversight frameworks, vendor risk assessments, and management reporting on technology and AI supply chain exposures.
Domain
Financial services / Technology risk management / AI governance
Deliverable
dashboards & analysis
Required skills
Technology risk management, Third-party risk management, Vendor governance, AI supply chain risk assessment, Regulatory frameworks, Control testing, Incident management, Stakeholder influence, Analytical thinking
Preferred skills
Experience in financial institutions, Knowledge of NIST AI RMF and EU AI Act, Familiarity with cloud and cybersecurity domains
Technologies
Cloud platforms, SaaS, Managed services, AI models, Open-source components, AI APIs
Responsibilities
Review vendor risk assessments and due diligence for technology service providers; Assess third-party control environments covering cybersecurity and data protection; Oversee AI vendor assessments for model provenance and data integrity; Conduct thematic reviews of technology risk controls; Report key risk exposures to senior management and governance committees; Oversee significant third-party or AI-related incidents and root cause analysis.
Seniority
Senior, hands-on IC
