Compliance and Operational Risk Manager – Application Security and Technology Risk Oversight
Core
Independent second line of defense oversight for application security, technology risk, and third-party risk within a large financial institution.
Role type
Senior IC compliance and operational risk manager (technology security)
Builds
Risk oversight, governance, and strategic advisory for cybersecurity and operational resilience
Domain
Financial services / Cybersecurity and Technology Risk
Required skills
Operational risk management, technology risk assessment, application security, third-party risk management, regulatory compliance, risk governance, issue remediation, executive stakeholder management, data analysis, industry security frameworks (NIST CSF)
Preferred skills
AI risk governance, vulnerability management, software development lifecycle controls, application security testing, professional risk certifications (CISSP, CISM, CRISC, CISA)
Technologies
NIST CSF, ITGPST, GCOR
Responsibilities
Assess risks and effectiveness of front-line processes and controls; Provide independent oversight of application and technology security assessments; Monitor emerging technology and AI-related risks; Review and challenge risk acceptance decisions and control design; Support executive reporting and governance routines; Partner across technology, cybersecurity, risk, audit, and business teams
Seniority
Senior, hands-on IC
