Join our dynamic team to navigate complex risk landscapes and fortify technology governance, making a pivotal impact in our firm's robust risk strategy.
As a Tech Risk & Controls Senior Associate in Cybersecurity and Technology Controls, you will contribute to the successful management of technology-aligned aspects of Governance, Risk, and Compliance in line with the firm's standards. You will be responsible for supporting the end-to-end management, ideation and strategy delivery of executive content to firm’s most senior level governance committees. This individual will play a significant role in storyboarding content and transforming ideas and concepts into clear concise presentations for the most senior level audiences.
This role is a hands-on producer and delivery lead for executive governance content and operates at the center of the Cybersecurity & Technology Controls organization, with exposure to all Cyber areas, Line of Business teams, Corporate Function teams, and the firm’s most senior audiences.
Job responsibilities
- Partner with the Vice President/Executive Director as a key liaison to Governance and Secretary teams supporting Operating Committee and Board Committees, helping ensure materials are accurate, complete, and delivered on time.
- Support executive content planning by maintaining topic intake, synthesizing stakeholder inputs, and helping ensure alignment to Cybersecurity & Technology Controls and Global Technology strategic priorities and organizational objectives.
- Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft remediation recommendations, validating outputs and handling data according to sensitivity and security requiremen
- Maintain a forward-looking calendar of governance forums and key milestones; track dependencies, owners, and actions; and drive day-to-day coordination to keep deliverables on schedule.
- Oversee meeting logistics and materials workflows (draft collection, version control, approvals, distribution) in partnership with senior stakeholders to ensure consistent, repeatable execution across governance forums.
- Support the team’s Executive Director and VP by converting concepts into first-draft storyboards and executive-ready presentation materials, iterating quickly based on feedback while maintaining clarity, precision, and narrative structure appropriate for senior audiences.
- Compile, validate, and summarize key technology risk themes, control observations, and remediation progress to support governance narratives and reporting; escalate gaps, inconsistencies, or emerging issues to the VP/ED for decisioning.
- Support assessment and monitoring of technology risks and controls, helping ensure alignment with firm standards, regulatory requirements, and industry best practices.
- Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and reporting routines, ensuring human review and alignment to governance standards.
Required qualifications, capabilities, and skills
- Formal training or certification on security concepts and 5+ years of experience or equivalent expertise in technology, risk management, information security, legal or a related field, with a focus on risk identification, assessment, and mitigation.
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.
- Experience with directly managing a team or directly influencing other teams to execute objectives and experience in risk identification, assessment, and control evaluation, with a strong understanding of industry standards
- Demonstrated ability to analyze complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders
- Proven ability to develop and maintain strong client and stakeholder relationships and excellent organizational and project management skills, ability to manage multiple competing priorities and work under tight deadlines
- High degree of initiative, self-direction, and ability to work well under pressure; intellectual curiosity and ability to learn quickly.
Preferred qualifications, capabilities, and skills
- Experience in Technology Risk and Compliance, Information Security, Corporate Governance, Metrics & Reporting, preferably at a global financial services organization
- Experience in Corporate Strategy or Consulting and proficient knowledge of risk management frameworks, regulations, and industry best practices.
#CTC