Technology Risk and Governance
Core
Leads the enterprise-wide technology risk and governance program, establishing frameworks to identify, assess, and mitigate IT, cyber, and third-party risks.
Role type
Senior IC technology risk and governance lead
Builds
Enterprise technology risk framework, policies, standards, and governance models
Domain
Financial services / Technology Risk Management
Deliverable
dashboards & analysis
Required skills
Technology risk framework design, stakeholder management, regulatory compliance, third-party risk management, AI risk governance, operational resilience, policy development, risk assessment, control evaluation
Preferred skills
Industry regulations (SOX, PCI, DORA), technical frameworks (NIST, ISO 27001), secure software development, regulator interaction
Technologies
NIST, ISO 27001, MITRE ATT&CK, SOC reports
Responsibilities
Own the enterprise technology risk framework and governance model; Provide advisory support for material technology decisions; Establish governance and reporting for senior management; Design and improve risk assessment and control evaluation processes; Lead and mature AI risk governance; Support enterprise data governance initiatives; Oversee technology aspects of third-party risk; Partner with Cyber Security for threat and incident risk governance; Drive operational resilience for technology services; Support client, regulator, and internal audit engagements
Seniority
Senior, hands-on IC