Technology and Information Security Risk Specialist
Core
Provides independent Second Line oversight of the Bank's technology infrastructure, information security, and cyber risk programs, evaluating risk identification, assessment, escalation, and remediation.
Role type
Senior Second Line Risk Specialist (Technology & Information Security)
Builds
Independent risk oversight frameworks, control reviews, and enterprise risk reports connecting tech security to broader ERM processes.
Domain
Banking / Financial Services / Cybersecurity & Risk Management
Deliverable
dashboards & analysis
Required skills
Risk assessment, control testing, regulatory compliance, stakeholder challenge, GRC tool management, emerging technology risk analysis, executive reporting
Preferred skills
CISSP, CISM, CISA, CRISC, CEH certifications
Technologies
GRC tools, cloud environments, NIST frameworks, NYDFS Part 500, FFIEC guidance
Responsibilities
Lead risk assessments and control reviews; develop Second Line frameworks; report on emerging tech risks (AI, automation); prepare materials for board and regulatory discussions; coordinate with audit, regulators, and First Line teams.
Seniority
Senior, hands-on IC with strategic oversight