Principal Tech Resiliency
Core
Provides independent second-line oversight, assessment, and credible challenge of first-line technology risk management activities to ensure technology-related risks are managed consistent with enterprise risk appetite and regulatory expectations.
Role type
Principal, second-line technology risk governance (resiliency focus)
Builds
Enterprise technology resilience capabilities, risk governance frameworks, and assurance practices for critical technology services and infrastructure.
Domain
Financial services / Payments / Technology Risk Management
Deliverable
dashboards & analysis
Required skills
Second-line oversight and challenge, risk assessment and control validation, resilience lifecycle evaluation, disaster recovery planning, regulatory framework interpretation, stakeholder management, critical thinking, data synthesis
Preferred skills
Financial services or fintech experience, regulatory audit support, risk/security certifications (CISA, CISM, CISSP, CRISC)
Technologies
NIST, ISO 27002, PCI DSS, FFIEC, SOC 2
Responsibilities
Review and challenge risk and control self-assessments, assess severity ratings and root cause analyses, identify risk trends through data analysis, prepare reporting for senior leaders and governance forums, evaluate resilience testing programs and recovery strategies, contribute to continuous improvement of resilience frameworks.
Seniority
Principal, hands-on IC with strategic oversight