technology risk manager

RP International

<div>
 
 
 Manager of Technology Risk, Information Technology.
 
 The role is responsible for leading the identification, evaluation, and mitigation of technology-related risks within a banking environment. This includes ensuring that risks across the technology landscape are recognized, assessed, and managed in line with established risk management frameworks and organizational risk appetite. The position also promotes a practical risk-conscious culture across IT operations, balancing security and compliance with business and operational priorities.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Risk Management
 
 
 <ul>
 <li>
 Design, implement, and maintain a comprehensive IT risk management framework aligned with industry standards and regulatory requirements, including CBO, SAMA, Basel II/III, and NIST.
 </li>
 <li>
 Conduct regular risk and control self-assessments (RCSA) across core banking systems, digital platforms, and technology infrastructure.
 </li>
 <li>
 Produce insightful technology risk reports, including key risk indicators (KRIs) and thresholds, coordinating with second-line risk teams.
 </li>
 <li>
 Oversee risk management for third-party vendors, cyber threats, data privacy, and operational resilience.
 </li>
 <li>
 Work closely with Information Security, Compliance, and Internal Audit to ensure cohesive and integrated risk practices.
 </li>
 <li>
 Support regulatory inquiries, audits, and assurance reviews by financial authorities and rating agencies.
 </li>
 <li>
 Develop and deliver risk awareness and training initiatives to enhance accountability and risk ownership across IT teams.
 </li>
 </ul>
 
 
 
 
 
 Leadership &amp; Collaboration
 
 
 <ul>
 <li>
 Lead and mentor a small team of technology risk professionals, ensuring a balance between operational needs and risk mitigation.
 </li>
 <li>
 Partner with IT, cybersecurity, legal, and risk teams to embed governance, risk, and compliance objectives into policies and procedures.
 </li>
 <li>
 Act as a strategic advisor to senior leadership on technology risk matters, offering practical solutions that consider both compliance and operational requirements.
 </li>
 <li>
 Serve as a primary point of contact for external stakeholders, including auditors, regulators, and industry peers.
 </li>
 </ul>
 
 
 
 
 
 Qualifications &amp; Experience
 
 
 
 
 Education &amp; Certifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Technology, Computer Science, Risk Management, or a related field; Master&rsquo;s degree preferred.
 </li>
 <li>
 Relevant certifications in technology and risk disciplines (e.g., GRC/Cybersecurity, ITIL, COBIT, PMP).
 </li>
 </ul>
 
 
 
 
 
 Professional Experience
 
 
 <ul>
 <li>
 Minimum of 10 years in technology roles, including at least 5 years in technology risk, preferably within financial services.
 </li>
 <li>
 Strong background in IT disciplines beyond GRC to support informed decision-making.
 </li>
 <li>
 Proven ability to provide pragmatic risk guidance, balancing risk with operational needs.
 </li>
 <li>
 Demonstrated experience in driving cultural change and implementing best-practice risk assessment processes.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Competencies
 
 
 <ul>
 <li>
 Strong networking, influencing, and stakeholder management skills.
 </li>
 <li>
 In-depth knowledge of risk management frameworks in banking and financial services.
 </li>
 <li>
 Excellent analytical, problem-solving, and attention-to-detail skills.
 </li>
 <li>
 Leadership skills with clear, concise communication abilities (oral and written).
 </li>
 <li>
 Creative, &ldquo;out-of-the-box&rdquo; thinking for problem-solving.
 </li>
 <li>
 Ability to drive change and deliver results under tight timelines.
 </li>
 <li>
 Professional demeanor with tact, flexibility, and empathy.
 </li>
 </ul>
 
 
</div>

Manager

Cathay General Bancorp

People Drive Our Success
 
Are you enthusiastic, highly motivated, and have a strong work ethic? If yes, come join our team! At Cathay Bank – we strive to provide a caring culture that supports your aspirations and success. We believe people are our most valuable asset and we proudly foster growth and development empowering you to achieve your professional goals. We have thrived for 60 years and persevered through many economic cycles due to our team members’ drive and optimism. Together we can make a difference in the financial future of our communities.
 
Apply today!
 
What our team members are saying: 
Video Clip 1
 
Video Clip 2
 
Video Clip 3
 
Learn more about us at cathaybank.com
 
GENERAL SUMMARY
 This position is responsible for the execution of 2LOD governance and oversight of Information Technology Risk Management (ITRM) which includes IT and IS governance and strategy, IT operations, Information Security, Change and Configuration Management, overall enterprise Information Technology and Information Security governance, risk, and compliance (GRC) management, and regular reporting to the Bank's governance committees. This individual will work closely with the Technology Risk and Control partners in 1LOD to participate in the credible challenge of the planning and implementation of Information Technology controls for all material IT and IS Projects and to provide oversight of the evaluation and selection of applications and systems. This individual will make recommendations and assist in the implementation of changes to work methods and procedures to make them more effective, to strengthen controls, or manage risk. This individual will also perform substantive control testing, as required, to assess the operating effectiveness of IT and IS general controls and application controls.
 
ESSENTIAL FUNCTIONS
 <ul>
<li>As the Second Line of Defense (2LOD), provide thought leadership and constructive challenge to the First Line of Defense (1LOD) for control and risk-related matters.</li>
<li>Oversee IT risk management practices covering all facets of the IT Risk Management Framework (including Operations, Change Management, and Information Security), provide interpretation and counsel on policies and Standards.</li>
<li>Responsible for supporting the Information Technology Risk Management program.</li>
<li>Support the adoption of the Bank’s eGRC platform throughout the enterprise and promote its use among the stakeholders of the Information Technology Risk Management program.</li>
<li>Provide technical and best practice guidance on Information Technology Risk Management and Information Technology, accounting for specific business platform complexities and issues.</li>
<li>Provide input into the setting of enterprise IT risk appetite based on platform specific differences and specific business considerations.</li>
<li>Develop periodic reports of Information Technology Risks and control effectiveness as required.</li>
<li>Review Information Security, Information Technology, and cybersecurity control processes along with associated documentation, and reporting.</li>
<li>Review key audit, regulatory and client due diligence to develop and communicate risk themes and solutions to the business.</li>
<li>Establish effective monitoring practices to ensure adherence to the IT Risk Management framework, supporting policies and standards, and assist the business in the identification of issues.</li>
<li>Perform 2LOD control testing, as required, to assess the design and operating effectiveness of 1LOD IT general controls and application controls.</li>
<li>Advise and collaborate with IT and the business on appropriate ways to strengthen controls in non-compliant areas.</li>
<li>Advise and provide credible challenge on the mitigation of IT Risk Management issues.</li>
<li>Assist in providing ongoing IT Risk Management governance and direction for the enterprise.</li>
<li>Engage with the Bank’s leads for Information Technology, Information Security, Disaster Recovery & Business Continuity, Infrastructure, Data Governance, Vendor Management, Third-Party Risk Management, and Change Management Practices to obtain technical domain advice and advise on matters of risk.</li>
<li>Develop and maintain key business relationships to provide advice and oversight on new initiatives, products, and projects.</li>
<li>Perform annual review and on-going monitoring and development of 2LOD owned IT and IS policies and standards.</li>
</ul>
QUALIFICATIONS
 
Education: 
<ul>
<li>College degree in Computer Science, Information Technology, or Information Security or equivalent preferred.</li>
<li>CISA or similar audit certifications.</li>
<li>Industry recognized certifications such as CISA, CRISC, or similar risk certifications preferred.</li>
</ul>
Experience: 
<ul>
<li>Minimum 5 years’ experience in Information Security Risk and/or Audit within the financial services industry.</li>
<li>Minimum 3 years’ experience in IT Audit or controls testing.</li>
<li>In depth knowledge and experience in Information Technology Governance, Risk, and Compliance.</li>
<li>Extensive knowledge and experience in regulatory guidance, most importantly for the FDIC, CFPB, and FFIEC requirements and supporting guidelines.</li>
</ul>
Skills/Ability: 
<ul>
<li>Strategic mindset, with excellent knowledge and understanding of the financial industry. Highly developed ability for conceptual thinking.</li>
<li>Excellent communication and presentation skills.</li>
<li>Proven track record of building strong relationships across business functions.</li>
<li>Strong presentation skills, in anticipation of audiences with varying IT knowledge; ability to adjust presentation details based on audience.</li>
<li>Demonstrated ability to interact effectively, internally, and externally, with the most senior representatives of the Bank, other organizations, regulators, and vendors.</li>
<li>Strong Microsoft Excel, PowerPoint, and report writing skills, including the ability to evaluate the usefulness of data and use it in meaningful communication.</li>
<li>Proven ability to initiate and manage projects.</li>
</ul>
OTHER DETAILS
 
AVP: $88K – $118K / year
 VP: $118K – $160K / year
 Pay determined based on job-related knowledge, skills, experience, and location.
 This position may be eligible for a discretionary bonus.
 
Cathay Bank offers its full-time employees a competitive benefits package which is a significant part of their total compensation. It is our goal to provide employees with a comprehensive benefits package to fit their needs which includes, coverage for medical insurance, dental insurance, vision insurance, life insurance, long-term disability insurance, and flexible spending accounts (FSAs), health saving account (HSA) with company contributions, voluntary coverages, and 401(k).
 
Cathay Bank may collect personal information from potential job candidates and applicants. For more information on how we handle personal information and your applicable rights, please review our Privacy Policy.
 
Cathay Bank is an Equal Opportunity and Affirmative Action Employer. We welcome applications for employment from all qualified candidates, regardless of race, color, ethnicity, ancestry, citizenship, gender, national origin, religion, age, sex (including pregnancy and related medical conditions, childbirth and breastfeeding), reproductive health decision-making, sexual orientation, gender identity and expression, genetic information or characteristics, disability or medical condition, military status or status as a protected veteran, or any other status protected by applicable law.
 
Click here to view the “Know Your Rights: Workplace Discrimination is Illegal” Poster:
 Poster- English
 Poster- Spanish
 Poster- Chinese Traditional
 Poster- Chinese Simplified
 
Cathay Bank endeavors to make www.CathayBank.comaccessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact, Mickey Hsu, FVP, Employee Relations Manager, at (626) 582-7370 or mickey.hsu@cathaybank.com. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

AVP/VP, IT/IS Risk Management

Unity Technologies

<div>The opportunity 
The Technology Compliance Senior Manager will be a pivotal leader responsible for the design, implementation, testing, evidence management, and continuous improvement of technology control environments across relevant compliance mandates, including but not limited to Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), and Web Content Accessibility Guidelines (WCAG). This role will manage all related engagements with internal and external audit partners and drive a proactive, risk-based approach to technology compliance.

What you'll be doing
<ul>
<li>Lead and evolve Unity's technology compliance program, overseeing the design, implementation, and continuous improvement of controls across SOX, PCI DSS, WCAG, and other regulatory frameworks.</li>
<li>Manage end-to-end audit and assurance activities, serving as the primary liaison for internal and external auditors and ensuring timely delivery of evidence, remediation, and reporting.</li>
<li>Develop and maintain compliance strategy and governance, aligning technology controls, policies, and procedures with business objectives and risk tolerance.</li>
<li>Embed compliance into technology operations, partnering with IT, Security, Engineering, and Legal to ensure compliance-by-design in systems and processes.</li>
<li>Drive continuous control monitoring and risk mitigation, proactively identifying and addressing control gaps and audit findings.</li>
<li>Champion automation and process improvements to enhance control efficiency, reduce manual effort, and strengthen audit readiness.</li>
</ul>
What we're looking for
<ul>
<li>Extensive leadership experience in technology risk, audit, or compliance.</li>
<li>Deep knowledge of SOX ITGCs, PCI DSS, WCAG/ADA, and related compliance mandates; experience with GDPR and SOC2 a plus.</li>
<li>Strong understanding of IT control frameworks such as COBIT, NIST CSF, and their application to regulatory programs.</li>
<li>Proven success leading large-scale audits and remediation efforts with both internal and external stakeholders.</li>
<li>Excellent ability to translate complex compliance concepts for technical and executive audiences; skilled at cross-functional collaboration.</li>
<li>Ability to identify control gaps, assess risk, and design practical, effective remediation strategies.</li>
</ul>
You might also have
<ul>
<li>Professional certifications such as CISA, CISSP, CRISC, PMP, or equivalent.</li>
<li>Experience in a Big 4 or large-scale enterprise environment managing technology compliance programs.</li>
</ul>
Additional information
<ul>
<li>Relocation support is not available for this position</li>
<li>Work visa/immigration sponsorship is not available for this position</li>
</ul>
Life at Unity 
We offer a wide range of benefits designed to support employees' well-being and work-life balance. You can read more about them on our career page.

Unity [NYSE: U] is the leading platform to create and grow games and interactive experiences. Creators, ranging from game developers to artists, architects, automotive designers, infrastructure experts, filmmakers, and more, use Unity to bring their imaginations to life across multiple platforms, from mobile, PC, and console, to spatial computing.

As of the third quarter of 2024, more than 70% of the top 1,000 mobile games were made with Unity, and in 2024, Made with Unity applications had an average of 3.7 billion downloads per month. For more information, please visit Unity.

Unity is a proud equal opportunity employer. We are committed to fostering an inclusive, innovative environment and celebrate our employees across age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable law. Our differences are strengths that enable us to support the growing and evolving needs of our customers, partners, and collaborators. If you have a disability that means there are preparations or accommodations we can make to help ensure you have a comfortable and positive interview experience, please fill out this form to let us know.

This position requires the incumbent to have a sufficient knowledge of English to have professional verbal and written exchanges in this language since the performance of the duties related to this position requires frequent and regular communication with colleagues and partners located worldwide and whose common language is English.

Headhunters and recruitment agencies may not submit resumes/CVs through this website or directly to managers. Unity does not accept unsolicited headhunter and agency resumes. Unity will not pay fees to any third-party agency or company that does not have a signed agreement with Unity.

Your privacy is important to us. Please take a moment to review our Prospect Privacy Policy and Applicant Privacy Policy. Should you have any concerns about your privacy, please contact us at DPO@unity.com.

#SEN #LI-LM1</div>

Senior Manager, Technology Compliance and Controls

FactSet

<div><div>FactSet creates flexible, open data and software solutions for over 200,000 investment professionals worldwide, providing instant access to financial data and analytics that investors use to make crucial decisions.
</div><div>At FactSet, our values are the foundation of everything we do. They express how we act and operate , serve as a compass in our decision-making, and play a big role in how we treat each other, our clients, and our communities. We believe that the best ideas can come from anyone, anywhere, at any time, and that curiosity is the key to anticipating our clients&rsquo; needs and exceeding their expectations.
</div>Your Team&rsquo;s Impact
The Information Security team at FactSet drives cybersecurity governance, risk, and compliance across the Technology organization. The team is responsible for ensuring that technology systems, infrastructure, and projects are effectively managed and optimized to meet regulatory requirements. This includes promoting cross-functional collaboration, managing the lifecycle of technology initiatives, and ensuring compliance and risk management within technology operations.
We are seeking an experienced, proactive leader with deep technical knowledge and exceptional analytical skills who can collaborate with key stakeholders and manage technological risk across the organization. The successful candidate will work with IT, compliance, and security teams to develop audit frameworks, assess risks, and drive actionable recommendations for continuous improvement. Responsibilities will include partnering on internal and external audits, preparing reports for senior management, and providing strategic guidance to ensure FactSet&rsquo;s technology practices align with regulatory standards. This critical role will be instrumental in upholding FactSet&rsquo;s commitment to operational excellence and risk management. 
 
The Lead Cybersecurity Architect, Technology Risk Management , will be responsible for identifying technology-related risks, evaluating IT General Controls, and providing strategic recommendations to strengthen our IT framework. This role involves supporting both external and internal technology audits by assessing the security, and compliance of our IT systems, policies, and procedures. This is a critical role for ensuring our organization meets regulatory requirements and maintains high standards in cyber security and operational effectiveness. 
 
What You&rsquo;II Do
<ul><li>Deploy and implement next generation GRC solution.
</li><li>Build and management process for risk assessment, issue management, audit management, ITRM, TPRM.
</li><li>Support and oversee comprehensive technology audits, including assessments of IT General controls across the environment.
</li><li>Collaborate with external auditors to coordinate and support annual technology audits, ensuring audit requirements and timelines are met.
</li><li>Identify, assess, and prioritize technology-related risks across the organization, with a focus on cybersecurity, data protection, and operational resilience.
</li><li>Review and evaluate the design and effectiveness of IT General Controls, recommending improvements as necessary.
</li><li>Ensure IT processes, systems, and controls align with regulatory requirements (e.g., SOX, GDPR, DORA) and industry standards (e.g., ISO 27001, NIST).
</li><li>Support compliance teams in responding to internal and external audits and inquiries regarding IT systems and data management practices.
</li><li>Partner with IT, security, and compliance teams to provide insights on risk mitigation strategies, control enhancements and findings remediation.
</li><li>Communicate audit findings and recommendations to senior management and key stakeholders, helping to shape a culture of continuous improvement and risk awareness.
</li><li>Oversee the preparation of audit reports, including executive summaries, findings, and actionable recommendations for improvement.
</li><li>Monitor industry trends, regulatory changes, and emerging risks to refine and enhance audit methodologies and best practices.
</li><li>Implement automated audit tools and data analytics to improve audit efficiency, coverage, and accuracy.
</li><li>Excellent communication and interpersonal skills, with the ability to collaborate effectively across functions and levels. 
</li></ul> 
What We&rsquo;re Looking For
<ul><li>Bachelor&rsquo;s degree in information technology, Computer Science, Accounting, or a related field. Master&rsquo;s degree is preferred.
</li><li>15+ years of experience in technology, security and risk management
</li><li>Strong knowledge of IT risk assessment, IT General Controls, NIST framework, and other compliance frameworks.
</li><li>Expertise in implementing and management of GRC tools.
</li><li>Professional certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) are strongly preferred. 
</li></ul> 
What's In It For You
<ul><li>At FactSet, our people are our greatest asset, and our culture is our biggest competitive advantage. Being a FactSetter means:
</li><li>The opportunity to join an S&amp;P 500 company with over 45 years of sustainable growth powered by the entrepreneurial spirit of a start-up.
</li><li>Support for your total well-being. This includes health, life, and disability insurance, as well as retirement savings plans and a discounted employee stock purchase program, plus paid time off for holidays, family leave, and company-wide wellness days.
</li><li>Flexible work accommodations. We value work/life harmony and offer our employees a range of accommodations to help them achieve success both at work and in their personal lives.
</li><li>A global community dedicated to volunteerism and sustainability, where collaboration is always encouraged, and individuality drives solutions.
</li><li>Career progression planning with dedicated time each month for learning and development.
</li><li>Business Resource Groups open to all employees that serve as a catalyst for connection, growth, and belonging.</li><li> 
 
Salary is just one component of our compensation package and is based on several factors including but not limited to education, work experience, and certifications.
</li></ul><div><div>Company Overview:
</div><div>FactSet ( NYSE:FDS | NASDAQ:FDS ) helps the financial community to see more, think bigger, and work better. Our digital platform and enterprise solutions deliver financial data, analytics, and open technology to more than 8,200 global clients, including over 200,000 individual users. Clients across the buy-side and sell-side, as well as wealth managers, private equity firms, and corporations, achieve more every day with our comprehensive and connected content, flexible next-generation workflow solutions, and client-centric specialized support. As a member of the S&amp;P 500, we are committed to sustainable growth and have been recognized among the Best Places to Work in 2023 by Glassdoor as a Glassdoor Employees&rsquo; Choice Award winner. Learn more at www.factset.com and follow us on X and LinkedIn .
At FactSet, we celebrate difference of thought, experience, and perspective. Qualified applicants will be considered for employment without regard to characteristics protected by law.</div></div></div>

Lead Cybersecurity Architect, Technology Risk Management

Experian

<div>Support the Global Head of GRC Enablement, Data and Technology Risk in strengthening the governance and oversight of risks associated with emerging technologies and data across Experian.
This role focuses on enhancing second line of defence (2LoD) capabilities by providing expert guidance, independent challenge, and strategic insight into the governance of AI and other transformative technologies, as well as the data that underpins them. The remit includes ensuring that risks related to the development, deployment, and use of emerging technologies (particularly AI) are effectively identified, assessed, and managed in alignment with regulatory expectations and Experian's enterprise risk appetite. The role also contributes to the continuous improvement of data governance and risk practices, supporting operational resilience and responsible innovation across the organization. Additionally, the role also contributes to the implementation and adoption of AI within Group Risk.
Key Responsibilities:<ul><li>
You will be #LI-hybrid based in Hyderabad and reporting to Head of Risk &amp; Strategy.</li><li>
Act as a global subject matter expert in data and technology governance and risk, contributing to the development and maintenance of related policies, standards, and control frameworks.</li><li>
You will provide independent 2LoD challenge, guidance, and support to 1LoD teams, promoting awareness and embedding governance requirements into operational practices.</li><li>
Collaborate with global functions&mdash;including Compliance, Legal, and Security&mdash;to ensure alignment with GRC principles and regulatory obligations.</li><li>
Partner with regional Heads of Risk to support the implementation of data and technology risk practices across geographies.</li><li>
Lead or contribute to the preparation of risk assessments, reports, and insights for senior management, governance forums, and external stakeholders.</li><li>
Shape and support the strategic direction for the oversight of emerging technologies within Global Risk, ensuring alignment with enterprise objectives and driving enhancements in risk management capabilities, operational resilience, and innovation.</li><li>
Drive the strategic adoption of AI within Group Risk by identifying opportunities, shaping implementation roadmaps, and ensuring alignment with enterprise risk appetite and responsible innovation principles.</li><li>
Champion a culture of collaboration, innovation, and continuous improvement across the risk function.</li></ul> 

 
<div>About Experian</div> 
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them save time and money.
We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com 
 
<div>Experience and Skills</div> 
<ul><li>15 years of equivalent experience in a relevant field (e.g., data science, AI, risk, technology); professional qualifications in emerging technologies governance or risk management are desirable.</li><li>
This is individual contributor (Non-Managerial) role</li><li>
Proven experience in AI, data, and technology governance, risk, and compliance within environments such as technology, FinTech, or IT services.</li><li>
Strong understanding of regulatory and industry frameworks related to emerging technologies (e.g., NIST AI RMF, ISO/IEC 42001).</li><li>
Work collaboratively across diverse global teams and functions, with strong stakeholder engagement.</li><li>
Interpret complex business operations and risk exposures, and develop clear, actionable mitigation strategies.</li><li>
Experience presenting to and influencing senior leadership.</li><li>
Effective integration and continuous improvement of AI, data, and emerging technology risk management practices.</li><li>
Constructive challenge and support provided to 1LoD and regional risk teams, resulting in improved risk outcomes.</li><li>
Positive feedback from stakeholders, peers, and Risk Leadership.</li><li>
Demonstrable improvements in risk management effectiveness and efficiency through the adoption of responsible AI and data governance practices.</li></ul> 
 
<div>Additional Information 
</div> 
Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward &amp; recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces&trade; 2024 (Fortune Global Top 25), Great Place To Work&trade; in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site and Glassdoor to understand why. 
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, color, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. 
Benefits 
Experian care for employee's work life balance, health, safety and wellbeing. In support of this endeavor, we offer best-in-class family well-being benefits, enhanced medical benefits and paid time off.
This is a hybrid remote/in-office role.<div></div>
Experian Careers - Creating a better tomorrow together</div>

Director – AI Governance, Risk & Data

HSBC

<div>Some careers have more impact than others.
If you&rsquo;re looking for a career where you can make a real impression, join HSBC and discover how valued you&rsquo;ll be.
HSBC is one of the largest banking and financial services organisations in the world, with operations in 62 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.
We are currently seeking an experienced professional to join our team in the role of Vice President , Tech and Cyber Specialist
Business: Risk &amp; Compliance
Principal responsibilities<ul><li>
Provide specialist actionable and contextual guidance across Technology and Cyber Security risks within both enabling business growth whilst maintaining related risks within agreed US appetite</li><li>
Responsible for the review of US controls relating to Technology and Cyber Security risks</li><li>
Responsible for supporting the Risk Stewards with internal and external events, providing insight and learnings relevant to controls relating to Technology and Cyber Security risks.</li><li>
Influence and provide direction to the 1LOD and ERM Business &amp; Functions team to ensure they fulfil own roles and responsibilities and manage resilience risk according to the Group&rsquo;s frameworks and within US stated appetite</li><li>
Manage relationships with wider ERM team.</li><li>
Partner with ERM Business &amp; Functions team and 1LOD to identify, measure, mitigate, monitor and report Technology and Cyber Security risks</li><li>
Responsible for ensuring awareness of the ERM risk impact associated with the role and must act in a manner that takes account of ERM risk considerations.</li><li>
You will adhere to and be able to demonstrate adherence to HSBC internal control standards. This is achieved by adherence to all relevant procedures, keeping appropriate records and, where appropriate, by the timely implementation of internal and external audit points, including issues raised by external regulators.</li></ul>
 Leadership &amp; Teamwork
<ul><li>Challenge and influence to ensure specialist advice and guidance is understood and followed</li><li>
Partner with relevant stakeholders to ensure a strong risk management culture and behaviours are effective and embedded</li><li>
Work in conjunction with ERM Business &amp; Functions team and the wider specialist teams</li><li>
Support diversity and reflect the HSBC brand and organisational values</li><li>
You will be expected to be able to work largely independently, taking a lead in how to best split your time and attention between the various technologies and tasks.</li><li>
You will often have to balance the need to move quickly in adopting new technologies, against the need to mitigate the risks they pose.</li></ul>
Requirements :<ul><li>
Strong level of business knowledge and Technology and Cyber Security risk expertise</li><li>
Strong level of risk management knowledge and relevant experience</li><li>
Comprehensive knowledge of the internal control environment</li><li>
Ability to communicate effectively, building strong relationships and influence senior internal stakeholders</li><li>
Comprehensive knowledge of the external environment (threat, regulatory, geopolitical, competitor, technological landscapes)</li></ul>
Required Technical Skillset<ul><li>
Graduate or post graduate</li><li>
Minimum of 7+ years of experience in technology and or cyber security risk preferable</li><li>
Adequate professional certificate in Technology and Cyber Security Risk, e.g CISA, CISSP</li><li>
Exposure to emerging technologies is preferable</li><li>
Strong Technology and Cyber Security risk expertise including risks, threats, common controls &amp; techniques</li><li>
Excellent verbal, written and interpersonal communication skills</li></ul>
Others<ul><li>
The role requires operational and engagement between 2pm &ndash; 11pm IST</li><li>
Ability to challenge practices and capabilities while maintaining a strong working relationship with the teams involved.</li><li>
Effective management of time to work across multiple disciplines, time zones, etc.</li><li>
Sensitivity to Cultural diversity and ability to dynamically adapt interpersonal style to build effective relationships.</li><li>
Understanding and Applying Risk Management in Context.</li><li>
Providing Expert Advice and Robust Challenge</li></ul>
You&rsquo;ll achieve more at HSBC<div>
HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.&rdquo;
</div><div>Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
</div>***Issued By HSBC Electronic Data Processing (India) Private LTD***</div>

VP, Tech and Cyber Specialist

DICETEK LLC

<div>Key Performance Indicators:<ul><li>Participation in relevant service line specific EA community sessions to address the GRC requirements</li><li>Completion of Risk and Control Self-Assessments as per the agreed schedule</li><li>Remediation of Technology GRC risk issues as per the established timelines</li><li>Adequately monitor and supervise remediation of Technology Service Line risk issues as per the agreed timelines</li><li>Ontime completion of KRI reporting and GORM incident management reporting</li><li>Completion of regulatory reporting activities as per the timelines</li><li>Adherence to GRC automation initiatives implementation plans</li><li>Ontime completion of mandatory trainings and meeting certification requirement</li><li>Ensure external audit and regulatory certifications are completed on time without non-compliance (PCI DSS, KPMG Statutory Audit, Swift CSF and NESA)</li><li>Coordinate with service lines to gather RFI&rsquo;s and management response for GIA (Group Internal Audit&rsquo;s) on time.</li></ul> 
Knowledge &amp; Experience:
<ul><li>6 or more years of working experience in IT Security, Risk and Governance practices.</li><li>Evidence of influencing senior stakeholders and dealing with external auditors and regulators</li><li>Excellent interpersonal skills and good oral and written communication skills</li><li>Good understanding of process models in ISO and industry standards relating to IT Security, Risk and Governance.
</li><li>Good understanding of security and risk management in financial institutions.</li><li>Good understanding of innovations / trends in IT and fintech in particular</li><li>Recent experience in the governance of agile and other digital/innovation ways of working</li><li>Good experience of enforcing good governance across an outsourced IT resourcing model.
</li><li>Strong analytical capabilities and knowledge of related tools and processes. Proven ability to handle volume detail and summarize effectively</li><li>Excellent knowledge all aspects of technology: infrastructure; operations, security, development, change/transformation, support, innovation, vendor management etc., and banking related processes especially risk management. Should have demonstrable experience of working in the majority of these domains.</li><li>Good understanding of technology processes across a full service IT organization. Should have demonstrable experience in these areas.</li><li>Good understanding of banking related environments &ndash; especially around high availability, data confidentiality, security etc.</li><li>Good understanding of project management to drive the team to deliver to objectives and to oversight the division&rsquo;s change governance
</li><li>Good understanding of technology trends to keep the policies and procedures ahead of the curve</li><li>Good knowledge in different IT process models (ITIL / ISO / COBIT etc.).
</li><li>High Performance attitude and track record to evidence</li><li>Adequate forward planning and implementation of improvement initiatives</li><li>Budget and cost management
</li><li>Utilization of resources &ndash; Effective utilization of staff to deliver planned and unplanned outcomes to agreed timelines</li><li>User satisfaction &ndash; Feedback from business units and other IT teams on the collaborative support provided by the unit
</li><li>Quality &ndash; Availability of record of activities carried out by the unit, in compliance with quality assurance requirements</li><li>Risk management &ndash; Effective management of risks in the infrastructure operations</li><li>Vendor management &ndash; Efficient use of outsourced vendor teams. Performance of vendors as per committed SLAs</li><li>Staff development &ndash; Staff turnover, availability of skills, staff satisfaction, and talent management</li></ul> 
Skills:<ul><li>Relationship management
</li><li>Influencing skills</li><li>Big picture thinker with attention to details</li><li>Strong change and communication skills</li><li>Strong analysis skills</li><li>Strong interpersonal skills</li><li>Resource (time and people) management skills</li></ul></div>

Senior Analyst, Technology Risk – Business Services

Search 10000+ Technology risk manager jobs near you this November. New roles added regularly across leading industries. Apply today.