1

Cyber and Technology Risk Assurance Lead

144780-Payments_Us
Full-time
On-site
Wilmington, North Carolina, United States
Description

Opportunity to shape risk culture and ensure technological safeguards in a dynamic, collaborative environment.

As a Tech Risk Assurance Lead in our Technology Risk Management team, you will lead us in expert technical risk assurance and control oversight to ensure our firm's products and lines of business achieve their objectives while effectively managing risk. Utilizing your background in technology risk management, you will work with us in cross-functional teams to identify, assess, and mitigate emerging risks and vulnerabilities. Your tactical and strategic decision-making will significantly impact our firm's operations, financial management, and public image. You will play a crucial role in fostering a robust risk culture and catalyzing continuous improvement, contributing to the development and implementation of comprehensive risk management policies, standards, and controls.

Job responsibilities

  • Lead comprehensive risk assessments to identify potential threats and vulnerabilities in the Firm's processes, systems, and operations, developing risk mitigation strategies
  • Advise stakeholders on risk management, controls development and adherence to mitigate risks
  • Proactively monitor key risk indicators, analyze control metrics, and offer insights on risk management effectiveness to senior management, driving continuous improvement initiatives
  • Engage with regulators, clients, and stakeholders on risk-related issues, provide necessary oversight, ensuring compliance with laws, regulations, and internal policies 

Required qualifications, capabilities, and skills

  • 5+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on risk assessment and control evaluation
  • Demonstrated expertise in regulatory compliance, risk management frameworks, and industry best practices (e.g., NIST, ISO, FFIEC, GDPR)
  • Proficiency in data security, risk management & controls, security governance, and analytical thinking, with a track record of implementing effective risk mitigation strategies
  • Advanced knowledge of data analytics and data literacy 

Preferred qualifications, capabilities, and skills

  • Certified Risk and Information Systems and Controls (CRISC) certification