Compliance and Operational Risk Manager – Application Security and Technology Risk Oversight

What you'll do

• Assess technology controls and risks, challenge risk acceptance and remediation decisions, and monitor adherence to policies and regulatory requirements.
• Identify and escalate issues, support remediation, and provide oversight of regulatory, audit, and issue-management activities.
• Prepare executive risk reporting and partner with technology, cybersecurity, risk, audit, and business teams.

What they ask for

• 7+ years of experience in operational risk, technology risk, information security, cybersecurity, compliance, audit, or related risk management disciplines, preferably within a large financial institution.
• Expertise in cybersecurity, application security, technology governance, third-party technology risk management, or operational resilience.
• Experience supporting regulatory examinations, audit engagements, issue remediation programs, and risk governance activities.
• Proficiency in industry security frameworks (e.g., NIST CSF) and applicable Laws, Rules and Regulations.

Nice to have

• Familiarity with Application Technology Security Assessments, vulnerability management, software development lifecycle controls, or application security testing programs.
• Professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent risk and technology certifications.

Pay

$97,200.00 - $230,000.00 annualized salary (base salary)

Tools

NIST CSF, Global Technology policies, ITGPST

AI focus

Monitor emerging technology and AI-related risks, including AI governance, model risk considerations, cybersecurity implications, and technology-enabled solutions for risk management.