technology risk analyst

AAA The Auto Club Group

<div>It&rsquo;s a great time to join AAA The Auto Club Group!
JOIN THE TEAM COMMITTED TO DRIVING YOUR CAREER FORWARD
Job Type:
Full time 
<div><div>Exempt/Non Exempt: 
</div></div>Salary
Job Description: 
 
 
IT Risk Analyst &ndash; The Auto Club Group
What you will do:
The IT Risk Analyst assists with the execution and maintenance of the IT risk management program, including the evaluation and mitigation of information technology risks across the organization and supporting leading risk teammates as needed.
Primary Duties and Responsibilities:
<ul><li>Contribute to documentation of IT risk management policies, standards, and processes
</li><li>Help maintain alignment with company objectives and regulatory requirements
</li><li>Perform analysis of key IT Risk performance/risk indicators for management
</li><li>Support internal and external IT risk assessments as dictated by the senior team members
</li><li>Contribute to IT risk appetites, tolerances, and mitigation plans related to IT systems as dictated by the senior team members
</li><li>Support monitoring activities of 1st line access reviews for general users, privileged users, and passwords
</li><li>Coordinate with IT to maintain an IT risk register, control library, and assign risk ownership
</li><li>Support regulatory readiness efforts and governance assessments for the information technology controls environment
</li><li>Research industry trends, emerging threats, and evolving regulations
</li><li>Contribute to training company stakeholders on IT risk
</li><li>Contribute to Enterprise Risk Management team&rsquo;s reporting and processes (e.g. key risks, watch list risks, AI Systems Program)
</li></ul>Supervisory Responsibilities:
None
How you will benefit:
IT Risk Analyst will earn a competitive salary of $65,000 - $80,000 annually with annual bonus potential based on performance.
Excellent and comprehensive benefits packages are just another reason to work for the Auto Club Group. Benefits include:
<ul><li>401k Match
</li><li>Medical
</li><li>Dental
</li><li>Vision
</li><li>PTO
</li><li>Paid Holidays
</li><li>Tuition Reimbursement
</li></ul>We&rsquo;re looking for candidates who:
Required Qualifications:
Education:
<ul><li>Bachelor&rsquo;s degree in information technology, cybersecurity, risk management, computer science, or related area
</li></ul>Experience:
<ul><li>2-4 years of experience in IT risk management, IT audit, cybersecurity, or related roles
</li></ul>Knowledge of:
<ul><li>Familiarity with property/casualty insurance industry operations and relevant regulatory requirements (e.g. NAIC Model Law, PCI-DSS)
</li><li>Foundational knowledge of Internal controls and core IT technologies and processes (e.g. network systems, operating systems, databases, change control tools and processes, computer systems operations, application and system development, help desk and incident monitoring, information security, data backup, retention and recovery, IT vendor management, asset management, disaster recovery)
</li><li>Familiarity with risk assessment methodologies and GRC tools
</li></ul>Skills:
<ul><li>Good written and verbal communication skills
</li><li>Attention to detail with the ability to follow processes and standards
</li><li>Proficiency in Microsoft Office products
</li><li>Work collaboratively and manage competing priorities, especially when translating expectations between third line or external audit assurance groups and first line risk and controls owners within IT
</li><li>Ensure strong relationship management and value demonstration to a wide set of stakeholders
</li><li>Identify, assess, and prioritize IT risks
</li><li>Multitask and work closely and effectively with other employees
</li><li>High degree of attention to detail and organization
</li><li>Maintain a high volume of work with few mistakes or delays
</li></ul>Preferred Qualifications:
Education:
<ul><li>Master&rsquo;s degree in Information Technology, Cybersecurity, Risk Management, Computer Science, or related area; MBA also considered
</li><li>One or more of the following professional certifications such as CISA, CISM, CRISC, or CISSP are strongly preferred
</li></ul>Prior Experience with:
<ul><li>IT risk frameworks (e.g. NIST CSF, COBIT) in the insurance or financial services industry
</li><li>IT systems and technologies including ServiceNow, Saviynt, Workday, SAP, Salesforce, Guidewire
</li><li>IT risk management for emerging technologies such as AI, machine learning, cloud computing, process automation, data analytics, etc.
</li></ul>Work Environment
This is a hybrid work arrangement (time spent in office and remote). Depending on the employee's role and leadership's assessment, some employees will come in to an ACG facility on a weekly basis, a monthly basis, or on an &quot;as needed&quot; basis for key meetings and collaborative activities. Most employees will be required to come into the office, at a minimum, for important departmental meetings or team building events.
Who We Are
Become a part of something bigger.
The Auto Club Group (ACG) provides membership, travel, insurance, and financial service offerings to approximately 14+ million members and customers across 14 states and 2 U.S. territories through AAA, Meemic, and Fremont brands. ACG belongs to the national AAA federation and is the second largest AAA club in North America.
By continuing to invest in more advanced technology, pursuing innovative products, and hiring a highly skilled workforce, AAA continues to build upon its heritage of providing quality service and helping our members enjoy life&rsquo;s journey through insurance, travel, financial services, and roadside assistance.
And when you join our team, one of the first things you&rsquo;ll notice is that same, whole-hearted, enthusiastic advocacy for each other.
We have positions available for every walk of life! AAA prides itself on creating an inclusive and welcoming environment of diverse backgrounds, experiences, and viewpoints, realizing our differences make us stronger.
To learn more about AAA The Auto Club Group visit www.aaa.com
Important Note:
ACG&rsquo;s Compensation philosophy is to provide a market-competitive structure of fair, equitable and performance-based pay to attract and retain excellent talent that will enable ACG to meet its short and long-term goals. ACG utilizes a geographic pay differential as part of the base salary compensation program. Pay ranges outlined in this posting are based on the various ranges within the geographic areas which ACG operates. Salary at time of offer is determined based on these and other factors as associated with the job and job level.
The above statements describe the principal and essential functions, but not all functions that may be inherent in the job. This job requires the ability to perform duties contained in the job description for this position, including, but not limited to, the above requirements. Reasonable accommodations will be made for otherwise qualified applicants, as needed, to enable them to fulfill these requirements.
The Auto Club Group, and all its affiliated companies, is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability or protected veteran status.
Regular and reliable attendance is essential for the function of this job.
AAA The Auto Club Group is committed to providing a safe workplace. Every applicant offered employment within The Auto Club Group will be required to consent to a background and drug screen based on the requirements of the position.</div>

IT Risk Analyst

CardWorks Servicing

<div>Join our team - and take the next step in achieving a fulfilling career!
What We Do
At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.
Who We Are<div>
CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.</div>
CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.
Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.
Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.
Position Summary:
The Senior Analyst, IT Risk is responsible for supporting and enhancing the organization&rsquo;s technology risk management, audit coordination, and IT control framework. This role partners closely with Internal Audit, Compliance, Technology, and business stakeholders to ensure regulatory readiness, effective control operation, and timely remediation of findings. The ideal candidate has a strong understanding of technology risks, audit processes, IT general controls, and information security principles.
Essential Functions:
Audit &amp; Regulatory Coordination<ul><li>
Coordinate audit preparation activities&mdash;including scheduling, evidence collection, and stakeholder communication&mdash;for internal audits and regulatory examinations (e.g., FDIC, SOX, SOC, and other technology-focused reviews).</li><li>
Serve as the primary liaison between Internal Audit, IT, and Compliance teams to ensure timely and accurate responses to audit inquiries.</li><li>
Oversee and track remediation activities; validate completion and effectiveness of corrective actions for technology-related audit findings.</li><li>
Participate in readiness assessments and pre-audit walkthroughs to identify issues before formal reviews begin.</li></ul>
Technology Risk Assessment &amp; Control Evaluation<ul><li>
Conduct comprehensive Technology Risk Assessments, identifying inherent and residual risks across infrastructure, applications, security, and cloud environments.</li><li>
Evaluate the design and operating effectiveness of technology controls, including IT General Controls (ITGCs), logical access, change management, operations, and security controls.</li><li>
Perform independent control testing to verify compliance with policies, standards, and regulatory requirements.</li><li>
Advise IT leadership on control gaps, deficiencies, risks, and recommended remediation strategies.</li></ul>
Governance, Risk, and Compliance (GRC) Support<ul><li>
Provide risk insights for new initiatives, technology implementations, cloud migrations, and major IT projects.</li><li>
Support enhancements to the IT risk management framework, control library, and GRC tooling.</li><li>
Monitor emerging technology risks and collaborate with stakeholders to develop mitigating controls.</li><li>
Contribute to the development and maintenance of IT policies, standards, and procedures.</li></ul>
Education and Experience:
Required:<ul><li>
Bachelor&rsquo;s degree in information technology, Cybersecurity, Risk Management, or related field (or equivalent experience).</li><li>
5-10+ years of experience in IT risk, audit, information security, or technology governance.</li><li>
Strong knowledge of IT controls frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements (SOX, FFIEC, SOC, etc.).</li><li>
Experience working with audit functions and responding to regulatory reviews.</li><li>
Ability to analyze control gaps and articulate risks clearly to technical and non-technical stakeholders.</li></ul>
Preferred:<ul><li>
Professional certifications such as CISA, CRISC, CISSP, CIA, or similar.</li><li>
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, MetricStream).</li><li>
Familiarity with cloud technologies (AWS, Azure, GCP) and related risk assessments.</li><li>
Prior first line Technology experience.</li></ul>
Summary of Qualifications:<ul><li>
Strong analytical and problem-solving skills</li><li>
Excellent communication and documentation abilities</li><li>
Detail-oriented with strong organizational skills</li><li>
Ability to manage multiple concurrent audits and priorities</li><li>
Collaborative mindset with the ability to work across IT, audit, and compliance functions</li><li>
Occasional travel may be required</li></ul>
Ideally, the qualified candidate will work at the following location: Woodbury, NY. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.
The salary range for this position, if located in NY Metro/NY State is $122,309 to $135,899. However, please note that the salary range will vary for other geographic areas.
#INDHP
Our Employee Value Proposition<ul><li>
Competitive Pay, including a Bonus Target or Variable Pay Incentive Program</li><li>
Benefits Package -Medical, Dental, and Vision (plus much more)</li><li>
401(k) Plan with Company Match</li><li>
Short- &amp; Long-Term Disability</li><li>
Wellness Programs</li><li>
Group Life and AD&amp;D Insurance</li><li>
Paid Vacation, Sick Days and bank Holidays</li><li>
Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition</li></ul>
We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.
We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.</div>

Senior Analyst, IT Risk

Tenneco

<div><div>At Tenneco, we don&rsquo;t follow industry standards; we set them, and we don&rsquo;t settle for being best-in-class because we hustle to be better than best-in-class. Whether it&rsquo;s our Core Values &ndash; radical candor, simplify, organizational velocity, tenacious execution and win &ndash; or our Get Stuff Done (GSD) mindset, we&rsquo;re determined to become the most trusted partner and best manufacturer and distributor to the transportation industry.</div> 
<div></div>
<div>
With a product portfolio as expansive as it is innovative, an obsessive commitment to quality and excellence, and a global presence, we&rsquo;re all about getting stuff done, so we can win.</div> 
<div>
</div><div>How do we make it happen? Through the Tenneco Way. Fueled by our Core Values, a winning mindset and a relentless commitment to excellence, the Tenneco Way is how we win. It&rsquo;s what keeps Team Tenneco bold, driven, and unapologetically focused on pushing past limits and redefining success.</div> 
<div>
</div><div>Here, you&rsquo;ll work alongside a team of relentless problem-solvers who are committed to making a tangible impact. If you&rsquo;re ready to break boundaries, deliver results, and enjoy the ride along the way, you&rsquo;ll thrive here.</div><div> 
Want to learn more about who we are? Check out our website to discover the Tenneco Way</div> 
<div></div>
<div>
ABOUT TENNECO</div>
<div>
At Tenneco, we don&rsquo;t follow industry standards; we set them, and we don&rsquo;t settle for being best-in-class because we hustle to be better than best-in-class. Whether it&rsquo;s our Core Values&ndash;radical candor, simplify, organizational velocity, tenacious execution and win&ndash;or our Get Stuff Done (GSD) mindset, we&rsquo;re determined to become the most trusted partner and best manufacturer and distributor to the transportation industry.</div> 
<div></div>
<div>
How do we make it happen? Through the Tenneco Way. Fueled by our Core Values, a winning mindset and a relentless commitment to excellence, the Tenneco Way is how we win. It&rsquo;s what keeps Team Tenneco bold, driven, and unapologetically focused on pushing past limits and redefining success.</div> 
<div>
</div><div>Here, you&rsquo;ll work alongside a team of relentless problem-solvers who are committed to making a tangible impact. If you&rsquo;re ready to break boundaries, deliver results, and enjoy the ride along the way, you&rsquo;ll thrive here.</div><div> 
Want to learn more about who we are? Check out our website to discover the Tenneco Way.</div> 
<div></div>
<div>
ABOUT THE ROLE</div>
<div>
We are seeking an IT Risk Management Senior Analyst to help design, implement, and mature our enterprise cybersecurity and technology risk program. This role is ideal for a risk professional who has built risk programs&mdash;not just operated them&mdash;and who can translate complex technical risks into clear, prioritized, and measurable risk decisions for leaders.</div> 
<div></div>
<div>
You will lead the development of our risk tolerance and thresholds, establish and manage a central risk register, and build a repeatable risk management lifecycle and supporting processes. You will partner across Cybersecurity, Physical Security, IT, Privacy, and business teams to ensure risks are identified, assessed, tracked, mitigated, and reported with consistency and transparency. This position is based in Northville, Michigan and reports directly to the Senior IT Governance Manager of the company.</div> 
<div></div>
<div>
KEY RESPONSIBILITIES</div> 
<div></div>
<div>
Risk Governance</div>
<ul>
<li>Define and operationalize risk tolerance and risk thresholds in partnership with leadership and stakeholders.</li>
<li>Develop and maintain a risk taxonomy, risk scoring methodology, and risk rating guidance to support consistent assessments.</li>
<li>Create and mature the risk management lifecycle including decision criteria, artifacts, roles, and accountability.</li>
</ul>
<div>Risk Register Management</div>
<ul>
<li>Establish a scalable security/technology risk register.</li>
<li>Implement workflows for intake, review, approval, and periodic reassessment.</li>
<li>Ensure risks are measurable, comparable, and traceable through evidence and documentation.</li>
</ul>
<div>Risk Assessment &amp; Treatment</div>
<ul>
<li>Partner closely with the IT Compliance team to document risk treatment plans: mitigation, acceptance, transfer, or avoidance; ensure alignment with risk thresholds.</li>
<li>Develop and manage the process for risk acceptance and exception handling, including decision criteria, approvals, and expiration/renewal.</li>
</ul>
<div>Reporting, Metrics &amp; Executive Communication</div>
<ul>
<li>Build risk reporting and dashboards that clearly communicate:
<ul><li>Risk posture against thresholds</li>
<li>Top risks and trends</li>
<li>Treatment progress and overdue actions</li>
</ul></li><li>Prepare risk summaries for leadership forums</li>
</ul>
<div>Process Development &amp; Continuous Improvement</div>
<ul>
<li>Create and maintain risk management playbooks, templates, standards, and procedures</li>
<li>Identify opportunities to streamline risk operations through tooling and automation (GRC platforms, workflow automation, integrations).</li>
</ul>
<div>JOB REQUIREMENTS
</div><ul><li>5&ndash;8+ years of experience in cybersecurity risk management, technology risk, GRC, or operational risk.</li>
<li>Demonstrated experience setting risk tolerance and thresholds and translating them into practical decision rules.</li>
<li>Proven track record of building and operating a risk register.</li>
<li>Experience creating or maturing a risk management lifecycle and supporting processes</li>
<li>Strong understanding of cybersecurity concepts (controls, threats, vulnerabilities, cloud risk, identity, incident risk, third-party risk).</li>
<li>Excellent written and verbal communication: ability to deliver clear, executive-ready risk narratives and recommendations.</li>
<li>Experience with GRC tools (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate, MetricStream) or comparable workflow systems.</li>
</ul>
<div>Skills:</div>
<ul>
<li>Excellent communication, organization time management and problem-solving skills</li>
<li>Exceptional track record of building relationships with stakeholders</li>
<li>Strong multi-tasking skills with the ability to manage multiple projects</li>
<li>Ability to function as a Team Player and maintain a good working relationship, yet think and act independently with professionalism, discretion and confidentiality</li>
<li>Excellent communication, organization time management and problem-solving skills</li></ul> 
<div></div>
<div>
</div><div>We don&rsquo;t want average. We want exceptional. We want someone who&rsquo;s hungry to build, unafraid to challenge, and bold enough to lead with empathy, speed, and precision. Sound like you? Let us know.</div> 
<div>
</div><div>Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities</div></div>

IT Risk Management Senior Analyst

Presidio

<div>
 
 
 SEIZE THE OPPORTUNITY TO BE A PART OF SOMETHING GREAT!
 
 
 
 Presidio is on the leading edge of a technology-driven movement to transform the way business is done, for our customers and our customers' customers. Joining Presidio means immersing yourself in a culture of self-starters, collaborators and innovators who make real, lasting change in the marketplace via cutting-edge technology and business solutions. At Presidio, we know that it&rsquo;s our people that make the connections happen.
 
 
 
 
 
 
 
 
 WHY SHOULD YOU JOIN US?
 
 You will set your career on track for outstanding achievement with a company that knows no limits. Presidio is a leading a global digital services and solutions provider focused on Digital Infrastructure, Business Analytics, Cloud, Security &amp; Emerging solutions.
 
 
 
 
 
 
 
 
 Position Overview
 
 
 
 A leading financial services organization is seeking a
 
 IT Risk &amp; Controls Specialist
 
 to support enterprise technology risk management initiatives. This role focuses on IT audit response, control validation, and remediation tracking across a large-scale technology environment.
 
 
 The ideal candidate will partner closely with engineering, infrastructure, security, and product teams to support audit activities, regulatory reviews, and ongoing risk management efforts.
 
 
 
 
 
 
 Location &amp; Engagement
 
 
 <ul>
 <li>
 
 Location:
 
 Berkeley Heights, NJ (Hybrid &ndash; 2&ndash;3 days onsite)
 </li>
 <li>
 
 Duration:
 
 3&ndash;6 Month Contract-to-Hire
 </li>
 </ul>
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Support implementation and execution of IT risk and control frameworks across infrastructure, network, cloud, and security domains
 </li>
 <li>
 Coordinate IT audit responses, including evidence collection, documentation, and stakeholder communication
 </li>
 <li>
 Track and manage Requests for Information (RFIs), ensuring timely and accurate submissions
 </li>
 <li>
 Monitor Management Action Plans (MAPs), including remediation progress, timelines, and supporting artifacts
 </li>
 <li>
 Evaluate IT General Controls (ITGCs) for design and operational effectiveness
 </li>
 <li>
 Partner with cross-functional teams (engineering, operations, security) to identify and mitigate risk
 </li>
 <li>
 Assist with technology risk assessments and remediation planning
 </li>
 <li>
 Maintain accurate documentation for audits, controls, and risk tracking
 </li>
 <li>
 Prepare reporting for leadership, audit teams, and risk stakeholders
 </li>
 <li>
 Stay aligned with regulatory and compliance standards within financial services
 </li>
 </ul>
 
 
 Required Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Systems, Computer Science, Business, Finance, or related field
 </li>
 <li>
 1&ndash;3 years of experience in:
 </li>
 <li>
 IT risk management
 </li>
 <li>
 IT controls / IT audit
 </li>
 <li>
 Audit response or compliance support
 </li>
 <li>
 Working knowledge of IT audit processes and risk frameworks
 </li>
 <li>
 Strong analytical, organizational, and documentation skills
 </li>
 <li>
 Proficiency with Microsoft Office and audit/risk tracking tools
 </li>
 <li>
 Strong communication skills with both technical and non-technical stakeholders
 </li>
 <li>
 Ability to manage multiple concurrent priorities with high attention to detail
 </li>
 </ul>
 
 
 
 
 
 Preferred Qualifications
 
 
 <ul>
 <li>
 Experience with SOX ITGCs and frameworks such as COSO, COBIT, or NIST
 </li>
 <li>
 Exposure to internal audits, regulatory exams, or remediation tracking
 </li>
 <li>
 Familiarity with enterprise IT environments (cloud, network, infrastructure, security)
 </li>
 <li>
 Experience working alongside engineering or product teams
 </li>
 </ul>
 
 
 
 
 
 Work Environment
 
 
 <ul>
 <li>
 Collaborative, cross-functional environment within a large enterprise technology organization
 </li>
 <li>
 Interaction with risk, audit, security, and engineering stakeholders
 </li>
 <li>
 Occasional extended hours during audit cycles or regulatory deadlines
 </li>
 </ul>
 
 
 
 
 
 Additional Notes
 
 
 <ul>
 <li>
 Opportunity to convert to a full-time role based on performance
 </li>
 <li>
 Ideal for candidates looking to grow within IT risk, audit, and compliance in a regulated environment
 </li>
 </ul>
 
 
 
 
 
 About Presidio
 
 
 
 
 Presidio is committed to Diversity, Equity, and Inclusion at the highest levels and has strengthened its drive to build and drive systemic DEI change process across all levels of the organization.Cultivating a culture of inclusion where the expression of all our differences are valued, celebrated, and add to our collective achievements.
 
 
 
 
 
 
 
 
 Presidio is a global digital services and solutions provider accelerating business transformation through secured technology modernization. Highly skilled teams of engineers and solutions architects with deep expertise across cloud, security, networking and modern data center infrastructure help customers acquire, deploy and operate technology that delivers impactful business outcomes. Presidio is a trusted strategic advisor with a flexible full life cycle model of professional, managed, and support and staffing services to help execute, secure, operationalize and maintain technology solutions. We serve as an extension of our clients' IT teams, providing deep expertise and letting them focus on their core business. Presidio operates in 40+ US offices and offices in Ireland, London, Singapore, and India.
 
 
 
 For more information visit: http://presidio.com
 
 
</div>

IT Risk and Controls Specialist

JPMorganChase

<div>JOB DESCRIPTION 
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.
As a Tech Risk &amp; Controls Lead with JPMorgan Chase in Corporate Technology - Infrastructure Management, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. In this role you will be partnering with various stakeholders, including Control and Product Owners, Application and SRE Teams, and Audit and Regulatory partners. You will contribute to the improvement and maintenance of a our technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.
Job responsibilities<ul><li>
Ensures effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations</li><li>
Develops and maintains robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals</li><li>
Executes reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work</li><li>
Proactively monitors and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance</li></ul>
Required qualifications, capabilities, and skills<ul><li>
5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation</li><li>
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements</li><li>
Proficient knowledge and expertise in data security, risk assessment &amp; reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies</li><li>
Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives</li></ul>
Preferred qualifications, capabilities, and skills<ul><li>
CISA, CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred</li></ul> 
 
ABOUT US 
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Tech Risk and Controls Lead - Governance Risk & Control

Information Technology Senior Management Forum

<div><div>Posted Date
3/19/2026
</div><div>Description
<div>Technology Senior Risk Manager- Enterprise Services Risk Office
We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products &amp; Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team supporting the enterprise global payments network we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business.
??As a Technology Risk Manager in Capital One&rsquo;s Enterprise Services (ES) Risk organization, you will apply your Tech and Cyber risk management skills and analytical skills to some of our highest profile Risk Management projects. You will act as a thought leader across Technology, Divisional CIO, and Cyber Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk guide services into our first line Divisional technology teams supporting our Global Payments Network. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company&rsquo;s Technology and Cyber risks in an open and collaborative environment.
Technology Risk Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our business partners. You will have a high level of exposure across lines of business and have the opportunity to work with Executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in Cyber and Technology risk management program development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. 
Responsibilities:<ul><li>
Serve as a Technology Risk Manager for Divisional CIO Leadership Team and respective software engineering teams to propel technology risk agenda and help DCIO LT make informed decisions in supporting their business partners.</li><li>
Build successful relationships with Tech and other team members to understand the impact of technology risk on critical business processes</li><li>
Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities.</li><li>
Influence leaders within Tech, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed</li><li>
Conduct periodic risk reviews with the executives and support reporting for technology risk metrics</li><li>
Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness</li><li>
Design and support internal risk and control governance processes</li><li>
Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One&rsquo;s strategic risk direction</li><li>
Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas</li></ul>
Basic Qualifications:<ul><li>
Bachelor's Degree or military experience</li><li>
At least 5 years of experience in performing risks assessments and risk advisory work for card or debit payments networks</li><li>
At least 7 years of experience in an information technology or risk management field</li><li>
At least 7 years of experience in project, risk program, or process management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal and external business clients</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li></ul>
Preferred Qualifications:<ul><li>
CISA, CRISC, CISSP, CISM or other Industry Risk Professional Certification</li><li>
At least 5 years working with Technology in the Financial Services industry</li><li>
At least 1 year of experience managing risks, governance, and controls for technology, digital products, and solutions</li><li>
At least 1 year of experience with Risk Management frameworks, reporting, and metrics within public cloud based environments</li></ul> 
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Sales Territory: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 

McLean, VA: $200,700 - $229,100 for Sr. Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Technology Senior Risk Manager- Enterprise Services Risk Office
We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products &amp; Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team supporting the enterprise global payments network we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business.
??As a Technology Risk Manager in Capital One&rsquo;s Enterprise Services (ES) Risk organization, you will apply your Tech and Cyber risk management skills and analytical skills to some of our highest profile Risk Management projects. You will act as a thought leader across Technology, Divisional CIO, and Cyber Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk guide services into our first line Divisional technology teams supporting our Global Payments Network. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company&rsquo;s Technology and Cyber risks in an open and collaborative environment.
Technology Risk Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our business partners. You will have a high level of exposure across lines of business and have the opportunity to work with Executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in Cyber and Technology risk management program development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. 
Responsibilities:<ul><li>
Serve as a Technology Risk Manager for Divisional CIO Leadership Team and respective software engineering teams to propel technology risk agenda and help DCIO LT make informed decisions in supporting their business partners.</li><li>
Build successful relationships with Tech and other team members to understand the impact of technology risk on critical business processes</li><li>
Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities.</li><li>
Influence leaders within Tech, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed</li><li>
Conduct periodic risk reviews with the executives and support reporting for technology risk metrics</li><li>
Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness</li><li>
Design and support internal risk and control governance processes</li><li>
Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One&rsquo;s strategic risk direction</li><li>
Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas</li></ul>
Basic Qualifications:<ul><li>
Bachelor's Degree or military experience</li><li>
At least 5 years of experience in performing risks assessments and risk advisory work for card or debit payments networks</li><li>
At least 7 years of experience in an information technology or risk management field</li><li>
At least 7 years of experience in project, risk program, or process management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal and external business clients</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li></ul>
Preferred Qualifications:<ul><li>
CISA, CRISC, CISSP, CISM or other Industry Risk Professional Certification</li><li>
At least 5 years working with Technology in the Financial Services industry</li><li>
At least 1 year of experience managing risks, governance, and controls for technology, digital products, and solutions</li><li>
At least 1 year of experience with Risk Management frameworks, reporting, and metrics within public cloud based environments</li></ul> 
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Sales Territory: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 

McLean, VA: $200,700 - $229,100 for Sr. Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
182,500.00 - 208,300.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Technology Senior Risk Manager- Enterprise Services Risk Office

GBS Solutions

<div>GBS Solutions Corporation (www.gbssol.com) is an SBA 8(a)-certified, small, disadvantaged business founded in 2014 to deliver high quality, innovative business and technical solutions. GBS has a reputation for outstanding leadership, customer and employee care, and innovation. We take pride in providing highly trained professionals with in-depth expertise in many technical areas as well as professional and administrative services.
GBS is looking for a Journeyman Business Intelligence Analyst to support National Institute of Standards and Technology (NIST) AI RMF AI Governance Structures and AI Risk Measurement Support Services contract. The business intelligence analyst will work with a senior project leader to advance AI governance structures. They will support updates to AI governance structures in alignment with the NIST AI RMF Govern function. They will help assess current governance practices, develop recommended policies, and define oversight mechanisms that establish accountability and promote transparency. They will also develop recommended governance structures to integrate into enterprise risk management frameworks to ensure consistency with enterprise-wide processes.
The business intelligence analyst will enhance AI risk management practices in alignment with the NIST AI RMF (Map, Measure, Manage) and applicable federal guidance. They will develop, test, and refine recommended methodologies for AI risk identification, assessment, mitigation, and monitoring, and incorporate these methods into agency publications, guidance, and operational processes. They will ensure practices are both operationalized for immediate oversight needs and institutionalized through formal documentation to support long-term agency adoption and leadership in AI risk management.
This role will contribute directly to the preparation of deliverables, including monthly status reports, crosswalk reports, meeting documentation, and the final report, ensuring requirements analysis and system specifications are clearly integrated into all outputs.<h1 class="jobSectionHeader">
Job Functions</h1><ul><li>
Support execution of a baseline assessment of current AI governance practices</li><li>
Research and draft AI governance policies, charters, and decision-making frameworks and document governance roles, responsibilities, and reporting lines</li><li>
Plan and execute stakeholder workshops to validate and refine governance mechanisms</li><li>
Research AI risk identification, classification, and assessment methodologies and draft standardized templates, scoring criteria, and reporting formats</li><li>
Support execution of pilot risk assessments on selected AI systems and draft mitigation strategies, risk thresholds, and escalation protocols</li><li>
Research and document continuous monitoring and feedback mechanisms and draft agency publications, playbooks, and guidance documents to embed AI risk practices into official policy and processes</li></ul>
<h1 class="jobSectionHeader">Experience Requirements</h1><ul><li>
3+ years of experience preparing and delivering communication materials to private industry or government stakeholders</li><li>
At least 2 years' experience communicating to stakeholders on Artificial Intelligence</li><li>
Demonstrated experience with technology policy matters related to trustworthy and responsible Artificial Intelligence</li><li>
Experience supporting the development and presentation of technology policy matters relating to artificial intelligence</li></ul><h1 class="jobSectionHeader">
Skills and Abilities</h1><ul><li>
Working knowledge of the NIST AI Risk Management Framework (AI RMF)</li><li>
Familiarity with applied artificial intelligence concepts, including algorithm development, data processing, machine learning, modeling and simulation, data collection, and AI risk management, with exposure to AI explainability, fairness, accountability, and transparency</li><li>
Strong oral and written communication skills</li></ul><h1 class="jobSectionHeader">
Education / Certification Requirements</h1><ul><li>
Undergraduate degree in science, engineering, social science, economics, or technical communications</li><li>
Must be able to obtain a position of public trust with the US Government</li></ul></div>

Journeyman Business Intelligence Analyst

Search 10000+ Technology risk analyst jobs near you this March. New roles added regularly across leading industries. Apply today.