Tech Risk & Controls Senior Associate

As a Tech Risk Controls Senior Associate in Cybersecurity Tech Controls team, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firms standards. Leverage your broad knowledge in risk management principles and practices to assess and monitor risks and implement effective controls. Your role in risk identification, control evaluation, and security governance is crucial in advising on complex situations and enhancing the firm s risk posture. Through collaboration and analytical skills, you will contribute to the overall success of the Technology Risk Services team and ensure compliance with regulatory obligations and industry standards.

Job responsibilities

• Lead the development and implementation of threat modeling frameworks to identify, assess, and mitigate potential threats to the firms technology infrastructure.
• Support efficient and effective execution of assessments, ensuring alignment with organizational objectives, risk appetite, and regulatory compliance.
• Support the governance of issues raised from our assessments, tracking concerns, and resolution of findings, and ensure timely and effective closure of identified control deficiencies.
• Assess and monitor technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
• Collaborate with cross-functional teams and stakeholders to support implementation of effective controls and threat modeling strategies
• Evaluate the effectiveness of existing controls, identify gaps, and recommend improvements to mitigate risks and enhance the firms risk posture
• Analyze complex situations, provide advice on risk management and threat modeling strategies, and support the implementation of risk mitigation measures.

Required qualifications, capabilities, and skills

• Formal Training or certification on Tech Risk control concepts 3+ years applied experience
• Expertise in technology risk management, information security, or a related field, with a focus on risk identification, assessment, mitigation and threat modeling
• Experience in risk identification, assessment, and control evaluation, with a strong understanding of industry standards
• Demonstrated ability to analyze complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders
• Proficient knowledge of risk management frameworks, regulations, and industry best practices

Preferred qualifications, capabilities, and skills

• CISM, CRISC, CISSP, or other industry-recognized risk certifications