technology risk manager

Ernest Talent

Job PurposeThe Risk Officer is responsible for establishing, implementing, and maintaining an effective enterprise risk management (ERM) framework across Sadad in accordance with QCB Corporate Governance Guidelines, regulatory expectations, and international risk management standards.The role ensures that all material risks &mdash; including operational, credit, liquidity, fraud, cyber, compliance, and third-party risks &mdash; are properly identified, assessed, mitigated, monitored, and reported. The Risk Officer supports the Board, senior management, and risk committees in maintaining a strong risk culture, effective internal controls, and regulatory compliance.Key Responsibilities1. Enterprise Risk Management Framework<ul><li>Develop and maintain Sadad&rsquo;s Enterprise Risk Management (ERM) framework, policies, and procedures.</li><li>Ensure alignment with QCB governance expectations, regulatory circulars, and fintech supervisory requirements.</li><li>Define risk taxonomy covering:</li><li>Operational risk</li><li>Technology &amp; cyber risk</li><li>Fraud risk</li><li>Liquidity risk</li><li>Settlement risk</li><li>Compliance risk</li><li>Third-party/vendor risk</li><li>Establish risk appetite statements and risk tolerance limits in coordination with senior management.</li></ul>2. Risk Identification &amp; Assessment<ul><li>Conduct periodic risk assessments and risk control self-assessments (RCSA) across all departments.</li><li>Maintain and update the enterprise Risk Register.</li><li>Identify emerging risks associated with:</li><li>New products and services</li><li>Payment gateway operations</li><li>Merchant onboarding</li><li>Technology infrastructure</li><li>Regulatory changes</li><li>Evaluate risk impact and likelihood using structured risk scoring methodologies.</li></ul>3. Operational &amp; Payment Risk Oversight<ul><li>Monitor risks related to:</li><li>Transaction processing failures</li><li>Fraudulent transactions</li><li>Chargebacks and disputes</li><li>Settlement and reconciliation mismatches</li><li>Review incident reports and ensure proper root cause analysis and corrective actions.</li><li>Ensure risk controls are embedded within operational workflows.</li></ul>4. Technology &amp; Cyber Risk Oversight<ul><li>Coordinate with IT and Security teams to assess:</li><li>System vulnerabilities</li><li>Access control effectiveness</li><li>Data protection measures</li><li>Business continuity and disaster recovery readiness</li><li>Review penetration testing results, vulnerability scans, and remediation tracking.</li><li>Ensure technology risk management aligns with QCB expectations.</li></ul>5. Third-Party &amp; Vendor Risk Management<ul><li>Conduct due diligence and risk assessments for vendors and service providers.</li><li>Monitor service level agreements (SLAs) and operational dependencies.</li><li>Ensure outsourcing arrangements comply with regulatory requirements.</li><li>Assess concentration risks and business continuity exposures.</li></ul>6. Risk Monitoring &amp; Reporting<ul><li>Develop and maintain Key Risk Indicators (KRIs) for all major risk categories.</li><li>Prepare periodic risk reports for:</li><li>Senior Management</li><li>Risk Committee</li><li>Board (as applicable)</li><li>Escalate material risks, control weaknesses, and regulatory concerns promptly.</li><li>Maintain dashboards highlighting risk exposure trends and mitigation status.</li></ul>7. Incident Management &amp; Root Cause Analysis<ul><li>Oversee documentation and classification of operational incidents.</li><li>Lead or coordinate root cause analysis (RCA) for significant risk events.</li><li>Ensure corrective and preventive actions (CAPA) are implemented and tracked.</li><li>Report significant incidents to regulators when required.</li></ul>8. Regulatory Compliance &amp; Governance Support<ul><li>Support internal and external audits related to risk management.</li><li>Assist in regulatory reporting and QCB submissions.</li><li>Ensure policies and procedures reflect current regulatory requirements.</li><li>Participate in governance committees and risk review meetings.</li></ul>9. Risk Culture &amp; Training<ul><li>Promote a strong risk-aware culture across the organization.</li><li>Conduct training sessions on risk management practices and internal controls.</li><li>Guide department heads on embedding risk controls into daily operations.</li></ul>Governance &amp; Independence<ul><li>Maintain independence from operational functions.</li><li>Ensure objective reporting of risk exposures without conflict of interest.</li><li>Uphold segregation of duties and confidentiality in all risk assessments.</li></ul>Qualifications &amp; ExperienceEducation<ul><li>Bachelor&rsquo;s degree in Finance, Risk Management, Business Administration, Economics, or related field.</li><li>Professional certifications preferred:</li><li>FRM (Financial Risk Manager)</li><li>CRM (Certified Risk Manager)</li><li>CIA, CISA, or equivalent</li></ul>Experience<ul><li>5&ndash;8 years of experience in risk management within banking, fintech, or financial services.</li><li>Experience working in a regulated environment with exposure to governance and compliance frameworks.</li><li>Hands-on experience in operational risk and technology risk oversight is highly desirable.</li></ul>Key Skills &amp; Competencies<ul><li>Strong understanding of enterprise risk management principles.</li><li>Knowledge of fintech payment operations and digital transaction risks.</li><li>Ability to interpret regulatory guidelines and translate them into controls.</li><li>Strong analytical and quantitative risk assessment skills.</li><li>Excellent report writing and presentation skills.</li><li>High integrity and strong ethical standards.</li><li>Ability to influence senior stakeholders and challenge constructively.</li></ul>Job Type: Full-timeWork Location: On the road

Risk Officer

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE:
To act as the first line of defence through managing the Information Technology risks with different lines of business to identify enhancements in IT Risk Management in line with Enterprise Risk Management and risk appetite framework, in order to adequately capture, assess, prioritize, report, mitigate &amp; manage IT risks based on international best practice. To report the top critical IT risks and highlight possible risks that are not currently captured and develop a framework to capture and govern all IT risks. To also develop and maintain IT Risk strategy, policy, procedures, process and manage IT Risk staff while embed and drive a risk culture &amp; risk appetite in all IT functions.
KEY ACCOUNTABILITIES:
 Description
 1. Participate in the development &amp; Provide recommendations on policies in collaboration with Technology Risk Management team on IT policies, systems, procedures, processes related to capturing &amp; managing different types of IT risks related to lines of business.
2. Work proactively with Enterprise Risk Management, Information Security, Technology teams and business domains in the design and implementation of IT risk assessment practices
 3. Manage Top Critical IT Risks and manage risks that are not currently captured and develop a framework to capture and govern all IT risks.
4. Assess tools and processes that are used to continuously update the risks in order to ensure that all material IT risks are adequately captured and managed.
5. Deploy Risk Appetite Indicators (RAIs) and Key Risks Indicators (KRIs) &amp; Review a consolidated list of RAIs / KRIs based on external best practices and regulatory expectations Direct and oversee processes to identify, assess, improve, and optimize risk practices within the IT environment.
6. Review and manage IT Risk status report and monitor the implementation of remediation actions to provide recommendations for the IT risk measurement techniques (e.g. RCSAs) and processes.
7. Force mindset and behavior changes in IT Risk Management at Bank level, &ndash; preparing a comprehensive communication, training and culture change initiative for people.
8. Communicate &amp; work directly with the business units and other internal IT stakeholder to facilitate IT risk analysis and risk management processes, identify acceptable levels of residual risk, and establish roles and responsibilities related to information classification and protection as per the published polices and respective Governance and Risk framework with various defense lines.
9. Lead the IT Risk Management function, that is responsible for providing independent assessment and assurance of the effectiveness and efficiency of the IT control environment.
10. Oversee the creation, dissemination and (as required) update documentation of CIB&rsquo;s matrix of identified IT risks and controls.
11. Direct IT functional teams in the development, implementation, monitoring, assessment, and reporting of control processes, documentation and risk mitigation activities.
 12. Work directly with the business units and other internal departments and organizations to facilitate IT risk analysis and risk management processes, identify acceptable levels of residual risk, and establish roles and responsibilities related to information classification and protection to ensure effective participation of IT Risk function in relevant committees such as IT Board Risk Committee.<div> 
</div></div><div>
Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS

Qualifications &amp; Experience

 Bachelor&rsquo;s degree in Business, Commerce, Economics or its equivalent.

 Master of Business Administration, CPA or CMA is preferable

 Minimum 15 years of different relative Business, Risk Management &amp; IT experience

 Specific system knowledge is a plus: Core banking system such as T24 provided by Temenos, Treasury Systems such as Kondor, Digital applications such as ACH, Smart Wallet, Mobile Banking &amp; Internet Banking, Risk Management systems such as SAS &amp; other support areas applications such as AML applications like Embargo, HR applications like Taleo &amp; EBS

 International standardization.

 Strong controls mindset and understanding of potential risks in IT, operations &amp; business environment.

Skills

 Communication Proficiency.

 Decision Making.

 Organizational &amp; Presentation Skills.

 Problem Solving/Analysis.

 Technical Capacity.

 Client management: tactful, resolute and committed to providing excellent customer service.

 Understands the use of information technology risks in a Strategic context as a means to an end

 Very good command of English &amp; Arabic languages

 Knowledge of business management and organization<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

IT RISK MANAGEMENT HEAD

Investec

<div><div><div>Investec &ndash; Where Out of the Ordinary Happens

At Investec, we do things differently. We're a leading international bank and wealth manager built on a culture of curiosity, entrepreneurial spirit and human connection. Ideas are heard, ambition is celebrated, and impact is encouraged. As part of a team that challenges convention and strives for outperformance, you'll help shape bold solutions for clients who expect something more than the ordinary.
</div></div><div><div>
Job Description &ndash; Resilience Manager (Operations &amp; Technology)

Location: Mumbai 
Department: IBP Operational Resilience Team 
Reporting to: Head of IBP Operational Resilience &amp; IGSI CEO 
Entity: IGSI 


About Investec

Investec is a distinctive, relationship-driven, client-focused financial services organisation. We are known for our entrepreneurial spirit, collaborative culture, and ability to manage complexity with confidence. Our India Global Capability Centre (GCC) forms a critical extension of our UK and global platforms, enabling resilient, high-quality operations and supporting a robust risk and control environment.

We look for people who can think differently, challenge constructively, and contribute to an &ldquo;Out of the Ordinary&rdquo; resilience capability. 


Role Overview

The Resilience Manager &ndash; Operations &amp; Technology will play a key role in strengthening Investec's operational resilience across UK and India operations. The role will ensure the GCC supports the continuity, stability, and recovery of Important Business Services (IBS) for Investec Bank PLC and other supported entities,

The individual will work closely with Global/Group Resilience, UK Business Units, Technology, Cybersecurity, Risk, and India leadership teams to embed resilience aligned to PRA/FCA expectations and Investec's strategic risk appetite. 


Key Responsibilities
<div>
<ul><li>Operational Resilience Framework Execution</li></ul>
</div><ul><li>Implement Investec's Operational Resilience Framework across GCC-supported functions.</li>
<li>Monitoring the delivery of processes that support Important Business Services (IBS), mapping of dependencies, and setting of impact tolerances.</li>
<li>Maintain alignment with UK PRA/FCA regulation, relevant subsidiaries operational resilience requirements and Investec's Group Resilience standards.</li>
<li>Ensure IGSI processes supporting UK businesses have robust business continuity and recovery plans with appropriate recovery time objectives.</li>
</ul><div><ul><li>Collaboration with Group &amp; Global Resilience Teams</li></ul>
</div><ul><li>Act as a key liaison between IGSI and the UK/Global Resilience teams.</li>
<li>Participate in global regulatory programmes, thematic reviews, and scenario testing cycles.</li>
<li>Ensure Investec's global methodologies, governance, and reporting standards are consistently adopted across GCC functions.</li>
<li>Support global crisis simulation exercises and resilience maturity assessments.</li>
</ul><div><ul><li>Business Continuity Planning &amp; Crisis Readiness</li></ul>
</div><ul><li>Develop, maintain, and test Business Continuity Plans (BCPs) for processes performed in the India GCC.</li>
<li>Conduct regular Business Impact Assessments (BIAs), identify operational vulnerabilities, and drive remediation.</li>
<li>Work with UK Crisis Management functions to manage cross-border incidents and communication protocols.</li>
<li>Lead local crisis events and coordinate with the India senior leadership team.</li>
</ul><div><ul><li>Technology, Cyber &amp; Disaster Recovery Alignment</li></ul>
</div><ul><li>Partner with Technology and Cyber teams to strengthen DR, infrastructure resilience, cloud failover capability, and data protection measures.</li>
<li>Ensure DR testing for applications supporting UK businesses meets regulatory and internal standards.</li>
<li>Support alignment with Investec's technology risk framework and cyber resilience strategies.</li>
</ul><div><ul><li>UK Regulatory Compliance (PRA/FCA)</li></ul>
</div><ul><li>Understand and help execute requirements relating to:</li>
<li><ul><li>Operational Resilience (PRA/FCA)</li>
<li>Outsourcing and third-party risk (PRA/FCA/HMRC)</li>
<li>Cyber and technology governance (DORA, Cyber Security &amp; Resilience Bill)</li>
</ul></li><li>Support UK submissions, audits, documentation updates, and attestation preparation.</li>
</ul><div><ul><li>GCC Operational Resilience Oversight</li></ul>
</div><ul><li>Evaluate people availability, location dependency, vendor integration, workforce flexibility, and capacity resilience within the GCC setup.</li>
<li>Assess concentration risks, facility resilience, and cross-site contingency arrangements.</li>
</ul><div><ul><li>Incident Management &amp; Post-Incident Learning</li></ul>
</div><ul><li>Manage incident response processes for India operations and support UK incident escalation protocols.</li>
<li>Conduct root cause analysis (RCA), create action plans, and ensure timely closure.</li>
<li>Facilitate &ldquo;lessons learned&rdquo; reviews across global teams.</li>
</ul><div><ul><li>Reporting &amp; Governance</li></ul>
</div><ul><li>Prepare resilience dashboards, KRIs, and governance reports for India Leadership, UK stakeholders, and Group committees.</li>
<li>Participate in internal audits, RCSA reviews, and regulatory examinations.</li></ul> 


Qualifications &amp; Experience

Essential
<ul>
<li>10&ndash;15 years' experience in operational resilience, business continuity, operational risk, or technology risk.</li>
<li>Experience working with or supporting a UK bank, preferably PRA/FCA-regulated.</li>
<li>Strong exposure to Global Capability Centres or global shared service models.</li>
<li>Understanding of PRA/FCA operational resilience regulations and UK outsourcing standards.</li>
<li>Experience with SEBI regulatory frameworks (advantageous if supporting India regulated entities).</li>
<li>Strong understanding of IT, DR, cloud, and cybersecurity fundamentals.</li>
<li>Experience working with cross-border teams in a matrix structure.</li></ul> 


Key Competencies
<ul>
<li>Ability to operate in a collaborative, relationship-driven culture</li>
<li>Strong analytical and risk-based decision-making skills</li>
<li>Excellent communication with senior UK/India stakeholders</li>
<li>Resilience under pressure and strong crisis leadership ability</li>
<li>Ability to interpret complex regulatory expectations into practical solutions</li>
<li>Excellent written and spoken presentation skills and experience in presenting and chairing at senior management forums.</li>
<li>Mindset aligned with Investec's values: distinctive, entrepreneurial, partnership-oriented</li></ul></div></div><div><div> 
As part of our collaborative &amp; agile culture, our working week is 4 days in the office and one day remote. We believe that being together enables us to live our values and support our clients and communities in an extraordinary way.

Investec offers a range of wellbeing benefits to make our people feel healthier, balanced and more fulfilled in their lives inside and outside of work. You can find a list of our benefits here</div></div><div><div> 
Embedded in our culture is a sense of belonging and inclusion. At Investec we want everyone to find it easy to be themselves, and to feel they belong. It's a responsibility we all share and is integral to our purpose and values as an organisation. We believe that innovation thrives when everyone feels respected, included, and empowered to contribute.

We actively seek out diverse talent and foster an inclusive environment, encouraging applications from people of all backgrounds and experiences. Here, you'll find networks, benefits, and development opportunities designed to support your career journey, wherever it may lead.

If this role excites you but you don't meet every requirement, we'd still love to hear from you. Your unique perspective and experience could be exactly what we are looking for. Get in touch!

At Investec, we're deeply invested in our clients, our colleagues, and our communities. It's more than a mindset; it's how we show up every day.

Be part of something Out of the Ordinary.</div></div><div><div>

Recite Me

We commit to ensure that everyone is fairly assessed during our recruitment process. To assist candidates in completing their application form, Recite Me assistive technology is available on our Careers pages. This can be accessed by clicking on the &lsquo;Accessibility Options' link at the top of the page.

The Recite Me tool includes a screen reader, styling and customisation options, a series of reading aids, a translator and more.

If you have any form of disability or neurodivergent need and require further assistance in completing your application, please contact the Careers team at [email protected] who will be happy to assist.</div></div></div>

Resilience Manager (Operations & Technology)

Minds United

<div>
 Full Time
 
 
 
 
 Job Purpose
 
 
 
 
 The IT Compliance &amp; Risk Lead is responsible for the assessment of technology\ vendor risks and control effectiveness across .....
 
 
 
 
 Job Purpose
 
 
 
 
 The IT Compliance &amp; Risk Lead is responsible for the assessment of technology\ vendor risks and control effectiveness across the IT disciplines. The IT Risk lead will identify, classify, and document control issues in banks environment by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly report to IT management.
 
 
 
 
 Key Accountabilities
 
 
 
 
 <ul>
 <li>
 Supports the establishment of the IT risk management process and integration and maturing of the process across the IT disciplines and practices.
 </li>
 <li>
 Supports development of the technology risk framework, policies, standards, and risk taxonomy.
 </li>
 <li>
 Supports the implementation and adherence to the risk framework, in collaboration and conjunction with business-aligned risk partners.
 </li>
 <li>
 Evaluates and identify technology risk related to divisions and the enterprise, including emerging trends that may impact risk profile.
 </li>
 <li>
 Supports the self and control risk assessment (RCSA) for IT and engage with the IT stakeholders to define the controls in place, residual risk and treatment plans.
 </li>
 <li>
 Maintains a consolidated list of the technology risk at the enterprise level and ensure a continuous monitoring on the risks and corresponding mitigations plans.
 </li>
 <li>
 Implements risk assessments across the enterprise and build an overall profile of the technology risk.
 </li>
 <li>
 Provides credible challenge based on risk assessment results and ensure risk is being mitigated.
 </li>
 <li>
 Collaborates with division risk officers and subject matter experts to ensure policies and standards are practical, effective and efficient
 </li>
 <li>
 Qualifications Bachelor&rsquo;s/master&rsquo;s degree in computer science or related field.
 </li>
 <li>
 Professional Certifications COBIT, ITIL, CRISC, ISACA
 
 
 </li>
 </ul>
 Experience 6 &ndash; 8 Years
 
 
 
 
 Skills
 
 
 
 
 <ul>
 <li>
 Minimum 3-5 years of experience in IT risk and compliance role.
 </li>
 <li>
 Solid understanding of IT governance, information security policies, standards and industry best practices.
 </li>
 <li>
 Experience in technology and operational risks frameworks.
 </li>
 <li>
 Practical experience in scoping, conducting risk assessment, and documenting results.
 </li>
 <li>
 Detail oriented and able to meet tight deadlines.
 </li>
 <li>
 Excellent documentation skills and ability to communicate effectively across functional areas.
 </li>
 </ul>
</div>

IT COMPLIANCE & RISK

JPMorganChase

<div>JOB DESCRIPTION 
You belong to the top echelon of talent in your field. At one of the world's most iconic financial institutions, where infrastructure is of paramount importance, you can play a pivotal role.<div> 
</div><div>As an Infrastructure Engineer III at JPMorgan Chase within the Infrastructure Platforms - Network Services, you utilize strong knowledge of software, applications, and technical processes within the infrastructure engineering discipline. Apply your technical knowledge and problem-solving methodologies across multiple applications of moderate scope.</div><div> 
</div>Job responsibilities<ul><li>
Own the end‑to‑end risk lifecycle across business and technology, including identification, assessment, prioritization, mitigation, monitoring, and reporting</li><li>
Lead product, change, vendor, and technology risk assessments, defining control requirements and residual risk</li><li>
Translate regulations and policies into practical, auditable controls and operating procedures, and execute enterprise and operational risk frameworks</li><li>
Build and maintain risk registers, KRIs/KPIs, and dashboards; escalate material risks with clear remediation plans and timelines</li><li>
Drive issue management and remediation, verifying sustainable control design and effectiveness</li><li>
Champion governance through risk committees, change forums, and control councils; prepare materials and present risk posture</li><li>
Conduct scenario analysis and stress testing and facilitate tabletop exercises to inform capital, contingency, resilience, and incident response plans</li><li>
Manage third‑party and outsourcing risk via due diligence, ongoing monitoring, and exit planning</li><li>
Partner with Cyber, Technology, and Operations to reduce operational, cyber, data, and resilience risks and to assess change risk pre‑ and post‑implementation</li><li>
Perform root‑cause analysis on incidents and near misses; implement corrective and preventive actions and automate monitoring where possible</li><li>
Coordinate audits, exams, and regulatory responses while maintaining accurate documentation and ensuring timely, sustainable closure of findings</li></ul>
Required qualifications, capabilities, and skills<ul><li><div>
Formal training or certification on infrastructure disciplines concepts and 3+ years applied experience</div></li><li>
Hands on experience in risk management, internal audit, compliance, or technology/cyber risk within financial services</li><li>
Apply deep knowledge of risk frameworks and regulations such as COSO, ISO 31000, NIST CSF, SOC, PCI, SOX, and OCC/FRB/SEC guidance</li><li>
Build KRIs, dashboards, and executive reporting using Excel and PowerPoint; leverage data tools such as SQL and Tableau/Power BI</li><li>
Quantify risk and articulate trade‑offs with analytical rigor and sound judgment</li><li>
Influence stakeholders constructively, balancing effective challenge with partnership</li><li>
Deliver programs and drive issue closure with clear owners, milestones, and metrics</li><li>
Communicate succinctly with executive‑ready storytelling and documentation</li><li>
Adapt to fast‑paced, highly regulated environments</li><li>
Pursue continuous learning in risk management and technology</li></ul>
Preferred qualifications, capabilities, and skills<ul><li>
Earn or maintain professional certifications such as CRISC, CISA, CISSP, CIA, FRM, or PMP</li><li>
Script in Python or similar languages to automate controls, monitoring, and analysis</li><li>
Operate across multiple public and private cloud environments and support migrations</li><li>
Apply and expand infrastructure engineering expertise across hardware, networking, databases, storage, deployment, integration, automation, scaling, resilience, and performance</li></ul>
ABOUT US</div>

Infrastructure Engineer III- Network Infrastructure Risk Analyst

COCC

Who we are...
 As an industry-leading fintech provider, COCC delivers innovative, comprehensive technology solutions and strategic partnerships throughout the Northeastern United States. Listed among American Banker's FinTech 100 and the Inc. 5,000 fastest growing companies in the nation, COCC inspires the industry with innovation and top-quality support. Designated a Top Workplace in Connecticut and a nationally Certified Great Place to Work, COCC recognizes employees as the core of our success.
 Inspiring you to become extraordinary in work and life.
 
What we need…
 We’re looking for a Technical Risk Manager to help drive our technology risk program with a strong focus on leading and maturing our enterprise vulnerability management capability. In this role, you’ll identify, assess, monitor, and mitigate technology and cybersecurity risks, ensuring our environments operate within the organization’s risk appetite. You’ll work hands on with modern infrastructure, cloud platforms, and security technologies that power our financial services ecosystem. You’ll lead a highly collaborative security team that values expertise, innovation, and practical problem solving. This is a unique opportunity to shape a core security function, influence technology teams across the business, and make a meaningful impact on our overall security posture. This position reports directly to the Vice President of Security.
 
What’s in it for you…
 COCC offers a collaborative environment, career growth, and all the benefits you’d expect from an award-winning employer, including:
 <ul>
<li>Hybrid schedules and generous paid time off to support flexibility and work/life balance</li>
<li>Customized training and onboarding to set you up for success in your first year</li>
<li>Robust employee development and formal career pathing programs</li>
<li>Cutting edge training and educational resources from providers like SANS, PluralSight, and CBT Nuggets</li>
<li>Competitive compensation, comprehensive benefits, and generous PTO offerings</li>
<li>On site fitness centers, wellness incentives, and lifestyle spending accounts</li>
<li>Tuition reimbursement for continued education</li>
<li>One on one career coaching and mentorship opportunities</li>
<li>DEIB initiatives that champion inclusion and encourage you to bring your authentic self to work</li>
<li>Financial planning assistance from certified professionals</li>
<li>Peer recognition programs celebrating contributions and achievements</li>
</ul>
What you’ll do…
 <ul>
<li>Lead a team of Risk Engineers responsible for identifying, assessing, monitoring, and mitigating technology and cybersecurity risks.</li>
<li>Lead and manage the enterprise Vulnerability Management Program, including strategy, tooling, operational processes, dashboards, and continuous improvement.</li>
<li>Own the full lifecycle of vulnerability intake, prioritization, assignment, remediation tracking, and risk based exception handling.</li>
<li>Partner closely with infrastructure, cloud, DevOps, and engineering teams to ensure timely and effective remediation of unacceptable risk.</li>
<li>Oversee scanning technologies (e.g., Qualys, Rapid7, Tenable, cloud native scanners) and maintain consistent coverage across servers, endpoints, networks, containers, and cloud workloads.</li>
<li>Provide technical risk advisory for new technologies, major system changes, and architectural decisions, with an emphasis on practical controls and risk reduction.</li>
<li>Assess technical controls—including IAM, network security, endpoint protection, cloud security, and encryption—to identify weaknesses or gaps.</li>
<li>Translate complex technical risks into clear, business focused explanations for leadership, committees, and technology stakeholders.</li>
<li>Participate in incident response and post incident reviews, contributing to root cause analysis and long term mitigation strategies.</li>
<li>Maintain strong alignment with GRC, Security Engineering, TPRM, and other cross functional teams to ensure cohesive enterprise risk management.</li>
<li>Monitor emerging threats and vulnerabilities relevant to financial institutions and recommend proactive defense measures.</li>
<li>Support risk acceptance processes through risk impact analyses and technical evaluation of compensating controls.</li>
<li>Perform internal reviews of infrastructure operations, coordinate external assessments, and ensure alignment with relevant frameworks and industry best practices.</li>
</ul>
What you’ll bring…
 <ul>
<li>Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field (or equivalent experience).</li>
<li>5–10+ years of experience in Information Security, Technology Risk, or Security Engineering within a complex environment, preferably in financial services.</li>
<li>2–5+ years of management experience leading security teams.</li>
<li>Deep hands on expertise with vulnerability management tools and methodologies (e.g., Qualys, Tenable, Rapid7, cloud native scanning, SBOM analysis).</li>
<li>Strong understanding of modern infrastructure and platforms including Windows/Linux servers, networking, cloud environments (AWS, Azure, or GCP), and containerized workloads.</li>
<li>Practical knowledge of security fundamentals such as IAM, network segmentation, endpoint security, encryption, patching processes, and secure configuration.</li>
<li>Familiarity with risk assessment and control validation practices related to technical risk domains.</li>
<li>Experience with regulatory and industry frameworks such as NIST CSF, NIST 800 53, CIS Controls, MITRE ATT&CK, or FFIEC cybersecurity guidance.</li>
<li>Ability to assess complex technical issues, determine risk impact, and communicate effectively with both technical and executive audiences.</li>
<li>Preferred (but not required) certifications: CISSP, CISM, CRISC, GSEC, GCCC, GSLC, Security+, and cloud security certifications (AWS/Azure/GCP).</li>
<li>Strong collaboration, communication, and leadership skills with the ability to influence stakeholders across the organization.</li>
<li>Familiarity with CI/CD security controls and container compliance.</li>
<li>Scripting or automation capabilities in Python, Perl, or PowerShell; experience with Ansible, Terraform, or n8n is a plus.</li>
</ul>
Salary range for this role is $125,000-150,000 annually
 
Applicants for employment in the US must have work authorization that does not currently or in the future require sponsorship of a visa for employment authorization in the United States.
 COCC is committed to maintaining a drug-free workplace. All applicants are required to pass a credit, background, and substance test prior to employment. COCC procures background and consumer reports in compliance with all Federal and State regulations, including The Fair Credit Reporting Act and applicable Department of Labor laws regarding pre-employment screens. COCC is an equal opportunity employer committed to a community of inclusion, and an environment free from discrimination, harassment, and retaliation.
 Accessibility - If you’re a job seeker with a disability and require accessibility assistance or an accommodation to apply for one of our jobs, please let us know by calling 860-678-0444 or emailing TalentManagement@cocc.com. Please specify the help you need and we’ll be happy to get back to you.

Technical Risk Management - Corporate Risk Manager - Req# 536

Scotiabank

<div>Requisition ID: 245907 
 
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. 
Global Banking and Markets 
Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank&rsquo;s strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world. 
Global Banking &amp; Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients. Our products include debt and equity financing, mergers &amp; acquisitions, corporate banking, institutional equity sales, trading and research, fixed income products, derivatives, energy, foreign exchange and precious &amp; metals. We also cross-sell the full range of wholesale products and services offered by the Scotiabank Group. 
Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries! We work together to drive ambition for every future! 
Purpose 
The Director, Cybersecurity Risk Management will lead the charge in strengthening Scotiabank&rsquo;s second line of defense (2LoD) Cybersecurity risk oversight of the first line implementation of cybersecurity programs, initiatives and delivery. 
This role requires a visionary leader with a deep understanding of cybersecurity principles, risk management, and compliance frameworks. The ideal candidate will possess strong communication and leadership skills, the ability to navigate complex regulatory landscapes, and a commitment to continuous improvement in the face of a rapidly evolving cybersecurity environment. 
What You'll Do<ul><li> 
Partner with global Risk team to develop and maintain a comprehensive Cybersecurity and Technology Risk Management Framework.</li><li>Serve as a subject matter expert and trusted risk oversight partner on cyber risks, regulatory reporting, and audit requirements, supporting requests and providing guidance across key cybersecurity domains, including Security Event Detection, Red Team, Cyber Incident Response, Cyber Threat Intelligence, Cyber Assurance, Exercise &amp; Simulations, Technology Resilience, Scenario Analysis, Third Party Cyber and Application Security.</li><li>Conduct effective challenge of high-risk items (e.g., new software, risk acceptances), ensuring actionable risk-based insights and solutions.</li><li>Partner with stakeholders in CISO, business, technology, and all three lines of defense to drive security compliance and awareness.</li><li>Lead risk oversight and challenge of first line risk management strategies and compliance activities, ensuring that the organization's cybersecurity posture is robust and resilient against top and emerging threats.</li><li>Provide insights and recommendations on cybersecurity trends, best practices, internal and external audit reports, and regulatory changes that may impact the organization.</li><li>Identify risk scenarios using the MITRE ATT&amp;CK Framework, calculate scoring, and present to executive leadership to drive risk-based action.</li><li>Collaborate with the Cyber Security Incident Response Team (CSIRT) to ensure timely monitoring, detection, and response to threats.</li><li>Ensure adherence to cyber risk management regulations, including FFIEC, OSFI, and other applicable laws.</li><li>Build and mentor a high-performing team, providing training and development opportunities to ensure team members stay current in the field.</li><li>Ensure alignment with the Bank&rsquo;s risk appetite and culture in all activities and decisions.</li><li>Create an environment in which the team pursues effective and efficient operations of their respective areas in accordance with Scotiabank&rsquo;s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to, and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions, and conduct risk.</li></ul> 
What You&rsquo;ll Bring<div><ul><li> 
University degree, preferably in Computer Engineering, Computer Science or related field, and a minimum of 10 years&rsquo; experience in increasingly senior Information Security roles in a complex, global organization.</li><li>Cybersecurity, technology, or risk management certifications such as CISSP, CCSP, CEH, CISM, etc.</li><li>Strong understanding and experience with regulatory and industry cybersecurity frameworks and guidance, including CRI Sector Profile, NIST, FFIEC, OSFI, and MITRE ATT&amp;CK.</li><li>Preferred certifications include CISA or equivalent, and familiarity with compliance frameworks (e.g., ISO or NIST).</li><li>10+ years of related IT process experience, including internal audit, external audit, or risk assessment.</li><li>Experience with financial sector regulatory practices and second line of defense effective challenge.</li><li>Excellent written and verbal communication skills, with the ability to communicate security objectives and concepts to technology and business teams to technical and non-technical stakeholders.</li><li>Strong leadership and collaboration skills. Excellent oral and written communication, ability to present confidently to senior executives, attention to detail and strong planning and management ability.</li><li>Solid understanding and operation of cybersecurity disciplines, including Cloud Security, AI/ML, Network Security, Threat Modeling, Vulnerability Management, and Technology Resiliency.</li><li>Advanced analytical reasoning skills, applying critical thinking and problem-solving techniques to break down business, technical, and operational objectives.</li><li>Proven ability to lead through change, manage dependencies, and control change in high-pressure, shifting environments.</li><li>Understanding of cybersecurity diligence methods, including vulnerability assessments and penetration testing.</li><li>Ability to interact and influence at all levels of management across functions.</li></ul></div> 
Interested? 
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank! 
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture. 
What's in it for you? 
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs. 
#GBMAuditRisk 
Location(s): United States : Texas : Dallas 
 
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
 
 
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.</div>

Director, Cybersecurity Risk Management

Search 10000+ Technology risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.