Associate Principal, Operational Risk Management, IT & Security
Core
Evaluate IT and Security risks by assisting with risk assessments, applying risk management frameworks, and leading risk identification and assessment processes for the organization.
Role type
Associate Principal, Operational Risk Management (IT & Security)
Builds
Risk inventories, taxonomies, AI governance assessment protocols, and audit reports for technology programs.
Domain
Financial Services / IT Risk & Cybersecurity
Required skills
IT and Security risk assessment, NIST and COBIT frameworks, RSA Archer, JIRA, ServiceNow, AI governance protocols, Distributed Ledger Technology (DLT) auditing, Identity and Access Management (IAM) controls, Role-Based Access Control (RBAC), vendor entitlement configuration.
Preferred skills
Experience with Microsoft Active Directory, ManageEngine ADManager Plus, Microsoft 365 Admin Center, SpiraTest, SailPoint.
Technologies
RSA Archer, JIRA, ServiceNow, SpiraTest, SailPoint, Microsoft Active Directory, ManageEngine ADManager Plus, Microsoft 365 Admin Center
Responsibilities
Lead the OCC's risk identification and assessment process (Risk Intake) for IT, Security, and business risks; Develop Artificial Intelligence governance assessment protocols and create AI risk registers aligned to NIST AI Risk Management Framework; Audit technology programs utilizing Distributed Ledger Technology (DLT) to assess architectural integration risks; Administer and review Identity and Access Management (IAM) controls and access governance processes; Communicate results of risk assessments to governance committees and leadership.
Seniority
Associate Principal, hands-on IC
