Source description
About the role
Role Summary : We are seeking a Technology Risk Lead to drive identification, assessment, and mitigation of technology-related risks across the organization. This role will partner closely with IT, Product, Security, and Business teams to ensure robust risk management practices are embedded into systems, processes, and decision-making. Key Responsibilities : 1. Technology Risk Management : - Develop and implement the enterprise technology risk management framework - Identify, assess, and monitor IT risks across applications, infrastructure, and processes - Maintain risk registers, heatmaps, and risk dashboards 2. Risk Assessment & Controls : - Conduct risk assessments for new systems, products, and change initiatives - Define and validate control frameworks (preventive, detective, corrective controls) - Lead risk reviews for BRD/PRD, system designs, and architecture decisions 3. Governance & Compliance : - Ensure alignment with regulatory, compliance, and internal audit requirements - Support audits (internal/external) and manage remediation plans - Drive adherence to frameworks such as ISO 27001, NIST, COBIT, or similar 4. Incident & Issue Management : - Analyze technology incidents for root cause and systemic risk implications - Track and report risk events, near misses, and control failures - Ensure timely closure of risk issues and action items 5. Stakeholder Management : - Partner with IT, Engineering, Product, and Business teams to embed risk practices - Present risk insights and recommendations to senior leadership - Act as a trusted advisor on risk-related decision making 6. Continuous Improvement : - Drive automation and tooling for risk assessment and reporting - Introduce proactive risk identification approaches (e.g., FMEA, scenario analysis) - Promote a strong risk-aware culture across teams Required Qualifications : - Bachelors or Masters degree in Technology, Risk Management, or related field - 8 - 12+ years of experience in Technology Risk, IT Audit, Information Security, or similar - Strong understanding of IT systems, SDLC, and enterprise architecture - Experience with risk frameworks (ISO, NIST, COBIT, FAIR, etc.) - Proven experience in risk assessments, control design, and governance Preferred Qualifications : - Certifications such as CISA, CRISC, CISSP, or equivalent - Experience in regulated industries (Banking, Fintech, Insurance, etc.) - Exposure to cloud environments (AWS, Azure, GCP) - Familiarity with DevOps, Agile, and modern engineering practices Key Skills : - Risk assessment & analytical thinking - Strong stakeholder and communication skills - Problem-solving and decision-making ability - Ability to translate technical risks into business impact - Leadership and influencing skills Success Metrics : - Reduction in critical technology risks and incidents - Timely closure of audit and risk findings - Improved risk visibility and reporting - Strong adoption of risk frameworks across teams Role Summary : We are seeking a Technology Risk Lead to drive identification, assessment, and mitigation of technology-related risks across the organization. This role will partner closely with IT, Product, Security, and Business teams to ensure robust risk management practices are embedded into systems, processes, and decision-making. Key Responsibilities : 1. Technology Risk Management : - Develop and implement the enterprise technology risk management framework - Identify, assess, and monitor IT risks across applications, infrastructure, and processes - Maintain risk registers, heatmaps, and risk dashboards 2. Risk Assessment & Controls : - Conduct risk assessments for new systems, products, and change initiatives - Define and validate control frameworks (preventive, detective, corrective controls) - Lead risk reviews for BRD/PRD, system designs, and architecture decisions 3. Governance & Compliance : - Ensure alignment with regulatory, compliance, and internal audit requirements - Support audits (internal/external) and manage remediation plans - Drive adherence to frameworks such as ISO 27001, NIST, COBIT, or similar 4. Incident & Issue Management : - Analyze technology incidents for root cause and systemic risk implications - Track and report risk events, near misses, and control failures - Ensure timely closure of risk issues and action items 5. Stakeholder Management : - Partner with IT, Engineering, Product, and Business teams to embed risk practices - Present risk insights and recommendations to senior leadership - Act as a trusted advisor on risk-related decision making 6. Continuous Improvement : - Drive automation and tooling for risk assessment and reporting - Introduce proactive risk id