Principal, Technology and Cyber Risk Management

Tasks

• Identification of new technology- and cyber-related risks (e.g., artificial intelligence, digital assets, quantum computing, the cloud, mobile devices, the Internet of Things, blockchain/electronic financial transactions, customer and employee data protection, etc.) arising from the implementation of new technology initiatives and activities.
• Reviewing, evaluating, and providing technical input for major new corporate projects, such as new technology initiatives and potential future considerations.
• Conducting technology and cybersecurity risk assessments, evaluating new elements, performing testing activities, and carrying out the necessary due diligence.
• Developing and/or updating existing test cases and test scenarios; with a focus on changes that affect technology performance and controls.
• Collaborate with stakeholders to define the organization's desired state, identify key success factors, and track progress toward achieving goals.
• Support management (CISO, Digital, Info Sec, Service Delivery, Customer Care, etc.) with workflows across various areas of the company to deploy new technology initiatives and mitigate risks consistently.
• Planning, scheduling, and monitoring deliveries, milestones, and resources across organized activities or projects.
• Conducting scenario-based, risk-based, desktop, and deep-dive assessments that target specific process vulnerabilities, as well as providing recommendations for managing the remediation process.
• Reviewing updates on industry trends, new threats, technologies, and policies; sharing knowledge and raising awareness of business and financial implications.
• Supporting management by developing and leading the analysis to identify areas with potential for improvement, and guiding the team toward implementing those improvements.
• Participate in technology and cyber/stability incident response activities as needed.

Requirements

• 5+ years of experience in security testing, with experience in scalable architectures and secure network architectures in financial organizations.
• Proven ability to manage multiple projects and workflows, set priorities, and ensure that deliverables and program changes remain on schedule and within budget.
• Experience with IT risk management frameworks and controls (e.g., PCI DSS, ISO 27001, etc.).
• Strong knowledge of current industry standards in the financial services sector, including industry standards and regulatory requirements.
• Bachelor's degree in a related field or equivalent professional experience.
• Must be legally authorized to work in the United States.
• Ability to travel, when necessary, up to 10–15% within the United States.