Manager, Information Risk Management
Core
Provide independent second-line oversight and challenge of first-line risk assessments, control designs, and remediation strategies across technology, data, and operational risk.
Role type
Manager, Information Risk Management (Second-Line Oversight)
Builds
Risk oversight programs including RCSAs, third-party risk, incident management, and BCM/DR
Domain
Financial Services / Information Risk & Governance
Required skills
Information risk oversight, Technology risk assessment, Cybersecurity risk analysis, Operational resilience evaluation, Risk control design review, Regulatory compliance alignment, Data analysis, Stakeholder communication, Risk opinion development, Change risk management
Preferred skills
GRC platform proficiency (Archer, ServiceNow), Framework knowledge (NIST, ISO, COBIT), Professional certifications (CISA, CRISC, CISSP, CISM), Generative AI/AI automation exposure, Senior stakeholder influence
Technologies
Archer, ServiceNow, Fusion, NIST, ISO, COBIT, CSA/CCM, Generative AI, Agentic AI
Responsibilities
Perform independent second-line oversight of first-line risk activities, Analyze complex technology and cybersecurity risks to identify gaps and systemic issues, Develop evidence-based risk opinions for senior leaders, Support risk oversight evolution through data analysis and automation, Communicate risk insights and recommendations to stakeholders
Seniority
Manager, hands-on IC with strategic oversight