Tech Risk Assurance Lead

Overview

In this Tech Risk Lead role, you will advance compliance and best practices across Global Technology within Technology Operations and Incident & Event Management. You will apply technology risk expertise to identify and mitigate risks, design controls, and partner with cross-functional teams to improve the firm’s risk posture. You will develop analytics-driven assurance approaches and leverage enterprise AI capabilities to accelerate risk evidence synthesis and reporting. You play a key role in aligning risk outcomes with regulatory expectations and leadership priorities.

Responsibilities

• Define and maintain technology control requirements with stakeholders, ensuring measurable outcomes and scope
• Apply risk and control expertise to Change Management, Incident Management, and Event Management domains
• Build and maintain trusted relationships with LOB BISOs, assessment teams, and product leads to enable cross-functional progress
• Prepare risk assessment reports, findings, and recommendations and support tracking to closure
• Monitor control effectiveness, identify gaps, and propose enhancements to strengthen risk posture and compliance
• Develop analytics-driven assurance approaches for risk identification, prioritization, and control assessments
• Use enterprise-approved AI capabilities to accelerate synthesis of risk evidence and draft executive-ready reporting
• Validate outputs and handle data according to sensitivity and security requirements
• Translate technical findings into clear business impacts for stakeholders
• Support governance and escalation processes for risk findings and remediation

Key requirements

• Experience with technology systems and cyber/technology risk management, including control assessments and remediation tracking
• Ability to translate technical findings into clear business impacts
• Regulatory compliance knowledge and familiarity with risk management frameworks (NIST, ISO, FFIEC, GDPR)
• Technical proficiency in AI risk governance and data security, including securing platforms and processes
• Experience using AI capabilities to support risk workflows, with validation and escalation where uncertain
• Experience applying data analytics to risk identification and assurance
• Strong communication and stakeholder-influence skills, capable of informing senior leadership

• Stakeholder management
• Influencing decisions at the executive level
• Analytical mindset and problem-solving
• AI risk governance
• Data security and threat mitigation
• Risk management frameworks (NIST, ISO, FFIEC, GDPR)

…