Information Risk Manager
Core
Provide independent second-line oversight and challenge across technology, data, and operational risk to ensure risk practices align with standards and regulations.
Role type
Manager, Information Risk Management (Second Line)
Builds
Risk assessments, control frameworks, and governance recommendations for technology and data operations.
Domain
Financial Services / Information Security & Risk Management
Deliverable
dashboards & analysis
Required skills
Independent second-line oversight, risk assessment, RCSA, third-party/vendor risk, incident management, business continuity, disaster recovery, change risk, regulatory compliance, technology risk, data risk, cloud risk, infrastructure risk
Preferred skills
GRC platforms (Archer, ServiceNow, Fusion), ISO, NIST, COBIT, CSA/CCM, OSFI frameworks, Generative AI, Agentic AI, automation, continuous monitoring, complex scenario analysis
Technologies
Archer, ServiceNow, Fusion, Generative AI, Agentic AI
Responsibilities
Review RCSA, third-party/vendor risk, incidents, technology changes, business continuity, and disaster recovery activities; Assess technology, data, cloud, infrastructure, and operational risks; Identify underassessed risks, control weaknesses, and emerging risks; Partner with risk teams and senior stakeholders in governance forums
Seniority
Manager, 6–10+ years experience