technology risk manager

Information Technology Senior Management Forum

<div><div>Posted Date
3/19/2026
</div><div>Description
<div>Technology Senior Risk Manager- Enterprise Services Risk Office
We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products &amp; Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team supporting the enterprise global payments network we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business.
??As a Technology Risk Manager in Capital One&rsquo;s Enterprise Services (ES) Risk organization, you will apply your Tech and Cyber risk management skills and analytical skills to some of our highest profile Risk Management projects. You will act as a thought leader across Technology, Divisional CIO, and Cyber Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk guide services into our first line Divisional technology teams supporting our Global Payments Network. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company&rsquo;s Technology and Cyber risks in an open and collaborative environment.
Technology Risk Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our business partners. You will have a high level of exposure across lines of business and have the opportunity to work with Executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in Cyber and Technology risk management program development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. 
Responsibilities:<ul><li>
Serve as a Technology Risk Manager for Divisional CIO Leadership Team and respective software engineering teams to propel technology risk agenda and help DCIO LT make informed decisions in supporting their business partners.</li><li>
Build successful relationships with Tech and other team members to understand the impact of technology risk on critical business processes</li><li>
Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities.</li><li>
Influence leaders within Tech, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed</li><li>
Conduct periodic risk reviews with the executives and support reporting for technology risk metrics</li><li>
Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness</li><li>
Design and support internal risk and control governance processes</li><li>
Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One&rsquo;s strategic risk direction</li><li>
Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas</li></ul>
Basic Qualifications:<ul><li>
Bachelor's Degree or military experience</li><li>
At least 5 years of experience in performing risks assessments and risk advisory work for card or debit payments networks</li><li>
At least 7 years of experience in an information technology or risk management field</li><li>
At least 7 years of experience in project, risk program, or process management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal and external business clients</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li></ul>
Preferred Qualifications:<ul><li>
CISA, CRISC, CISSP, CISM or other Industry Risk Professional Certification</li><li>
At least 5 years working with Technology in the Financial Services industry</li><li>
At least 1 year of experience managing risks, governance, and controls for technology, digital products, and solutions</li><li>
At least 1 year of experience with Risk Management frameworks, reporting, and metrics within public cloud based environments</li></ul> 
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Sales Territory: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 

McLean, VA: $200,700 - $229,100 for Sr. Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).
Technology Senior Risk Manager- Enterprise Services Risk Office
We are hiring! The Enterprise Services Business Risk Office provides risk management support to several lines of business including: Brand, Enterprise Supplier Management, Enterprise Products &amp; Experience (EPX), Software, External Affairs, eData, Global Workplace Solutions, Emerging Payments, Ventures, and Tech. As the risk team supporting the enterprise global payments network we are on the cutting edge of risk management and provide support for new and emerging technologies as well as critical business strategies. Capital One has taken a bold journey to build a technology company, while operating in a complex, highly regulated business.
??As a Technology Risk Manager in Capital One&rsquo;s Enterprise Services (ES) Risk organization, you will apply your Tech and Cyber risk management skills and analytical skills to some of our highest profile Risk Management projects. You will act as a thought leader across Technology, Divisional CIO, and Cyber Security teams to develop and support best-in-class industry risk solutions in a manner that supports innovation and protects our customers, shareholders and associates. You will collaborate with second lines of defense to lead and implement risk and control tools, techniques, and frameworks for the Technology organization, as well as provide direct tech risk guide services into our first line Divisional technology teams supporting our Global Payments Network. Your contributions will drive organizational change through risk identification, measurement, analysis and reporting in order to better manage the company&rsquo;s Technology and Cyber risks in an open and collaborative environment.
Technology Risk Managers are experienced and progressive individuals that operate within a highly collaborative team environment to deliver value-added risk management services to our business partners. You will have a high level of exposure across lines of business and have the opportunity to work with Executives to create and implement innovative solutions to identify and mitigate potential risks to the Company. Proficiency in Cyber and Technology risk management program development and management are key to success in this role. The successful candidate will be an experienced risk management professional who understands technology functions and organizations, with strong analytical, planning, strategic thinking, organizational and communication skills. 
Responsibilities:<ul><li>
Serve as a Technology Risk Manager for Divisional CIO Leadership Team and respective software engineering teams to propel technology risk agenda and help DCIO LT make informed decisions in supporting their business partners.</li><li>
Build successful relationships with Tech and other team members to understand the impact of technology risk on critical business processes</li><li>
Perform risk reviews during various processes such as Risk Control and Self Assessments (RCSAs), Process Level Assessments (PLA), Exceptions, Applications, Targeted Risk Assessments and recommend on risk mitigation activities.</li><li>
Influence leaders within Tech, Compliance, Cyber Security, second line risk organizations, and Internal Audit on key technology risks and actions needed</li><li>
Conduct periodic risk reviews with the executives and support reporting for technology risk metrics</li><li>
Develop risk analysis, perform deep dive investigations, and drive specific risk initiatives to minimize risk posture and strengthen overall control suite effectiveness</li><li>
Design and support internal risk and control governance processes</li><li>
Identify and implement continual tech risk program enhancements based on industry standards and best practices in alignment with Capital One&rsquo;s strategic risk direction</li><li>
Support the Enterprise Services (ES) Risk organization by implementing new and innovative ideas</li></ul>
Basic Qualifications:<ul><li>
Bachelor's Degree or military experience</li><li>
At least 5 years of experience in performing risks assessments and risk advisory work for card or debit payments networks</li><li>
At least 7 years of experience in an information technology or risk management field</li><li>
At least 7 years of experience in project, risk program, or process management</li><li>
At least 7 years of experience supporting, partnering, and interacting with internal and external business clients</li><li>
At least 7 years of experience consulting with senior executives or strategy building</li></ul>
Preferred Qualifications:<ul><li>
CISA, CRISC, CISSP, CISM or other Industry Risk Professional Certification</li><li>
At least 5 years working with Technology in the Financial Services industry</li><li>
At least 1 year of experience managing risks, governance, and controls for technology, digital products, and solutions</li><li>
At least 1 year of experience with Risk Management frameworks, reporting, and metrics within public cloud based environments</li></ul> 
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.
Sales Territory: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 

McLean, VA: $200,700 - $229,100 for Sr. Manager, Cyber Risk &amp; Analysis 

Richmond, VA: $182,500 - $208,300 for Sr. Manager, Cyber Risk &amp; Analysis 
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</div>
</div><div>Salary
182,500.00 - 208,300.00 Annual
</div><div></div><div><div>Type<div>
Full-time</div></div></div></div>

Technology Senior Risk Manager- Enterprise Services Risk Office

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

Genworth

<div>At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. Further, we are the spouses, children, siblings, friends, and neighbors of those that need care&mdash;and we bring those experiences with us to work in serving our millions of policyholders each day.
We apply that same compassion and empathy as we work with each other and our local communities. Genworth values all perspectives, characteristics, and experiences so that employees can bring their full, authentic selves to work to help each other and our company succeed. We celebrate our diversity and understand that being intentional about inclusion is the only way to create a sense of belonging for all associates. We also invest in the vitality of our local communities through grants from the Genworth Foundation, event sponsorships, and employee volunteerism.
Our four values guide our strategy, our decisions, and our interactions:<ul><li>
Make it human. We care about the people that make up our customers, colleagues, and communities.</li><li>
Make it about others. We do what's best for our customers and collaborate to drive progress.</li><li>
Make it happen. We work with intention toward a common purpose and forge ways forward together.</li><li>
Make it better. We create fulfilling purpose-driven careers by learning from the world and each other.</li></ul> 
POSITION TITLE
Senior Manager, Third-Party Risk Management (TPRM)
POSITION LOCATION
Richmond, VA
YOUR ROLE
At Genworth, we empower families to navigate the aging journey with confidence. We are compassionate, experienced allies for those navigating care with guidance, products, and services that meet families where they are. As part of the Risk organization, this role works with cross-functional teams to understand the risks that face our company and execute risk management strategies that enable we&rsquo;re there for our customers and their families &ndash; now and in the future.
Job Summary
The Senior Manager, Third-Party Risk Management (TPRM) leads the day-to-day execution and ongoing maturity of the organization&rsquo;s third-party risk program. This role is accountable for strengthening governance, streamlining and automating workflows, improving risk intelligence, and enabling leaders to make real-time, risk-informed decisions through effective TPRM tooling, dashboards, and reporting. The Senior Manager partners closely with stakeholders across Technology, Operations, Sourcing/Vendor Management, Legal, Privacy, Compliance, and Business Owners to ensure third-party risk is understood, managed, and monitored across the third-party lifecycle&mdash;from intake and due diligence through contracting, onboarding, continuous monitoring, and offboarding.
Key Outcomes<ul><li>
A measurably mature, scalable, and consistent TPRM program (policy-to-process alignment, standardized controls, and clear governance)</li><li>
Leaders have timely, actionable, and trusted risk insights (dashboards, KRIs, real-time status, and decision-ready summaries)</li><li>
The TPRM tool set is actively used and optimized&mdash;enabling faster cycle times, better data quality, and automation of manual steps</li><li>
Strong engagement with management and business stakeholders&mdash;clear accountability, escalations handled appropriately, and risk accepted with informed approvals</li><li>
Continuous monitoring and issue/remediation management reduce exposure and improve vendor performance over time</li></ul>
What you will be doing
Program Leadership and Maturity<ul><li>
Drive the TPRM maturity roadmap, including improvements to governance, policies/standards, workflow design, tiering methodology, and lifecycle processes</li><li>
Establish and maintain program operating rhythms (e.g., monthly risk reviews, KPI/KRI reporting, issue remediation tracking, and executive readouts)</li><li>
Identify gaps and implement enhancements to ensure program scalability, consistency, auditability, and alignment with regulatory/industry expectations</li><li>
Develop and maintain standard operating procedures, templates, playbooks, and training to ensure consistent execution</li></ul>
Stakeholder and Management Interaction<ul><li>
Serve as a trusted advisor to senior leaders and business owners, translating third-party risk into clear decision options</li><li>
Facilitate risk discussions, challenge risk assumptions appropriately, and ensure documented risk decisions, exceptions, and approvals align to governance</li><li>
Partner with Sourcing/Vendor Management to embed risk requirements into intake, sourcing, and ongoing vendor management</li><li>
Collaborate with Legal, Privacy, Compliance, and Information Security to ensure contract provisions, control expectations, and due diligence are aligned and enforceable</li></ul>
TPRM Tooling, Automation and Decision Enablement<ul><li>
Own day-to-day management and optimization of the organization&rsquo;s TPRM technology stack</li><li>
Configure and enhance workflows</li><li>
Develop real-time dashboards and reporting for leaders: portfolio risk views, assessment status, SLA adherence, open issues, renewals, concentration risk, and critical vendor oversight</li><li>
Improve data quality and establish a single source of truth for third-party risk inventory, risk ratings, and decision history</li><li>
Define and track KPIs/KRIs (cycle time, backlog, critical findings aging, remediation performance, override rates, exception trends)</li></ul>
Third-Party Risk Assessments and Lifecycle Management<ul><li>
Oversee third-party risk assessments, including inherent risk tiering and due diligence</li><li>
Ensure assessment scope and depth are appropriate for vendor criticality, data sensitivity, and service impact</li><li>
Drive effective issue management and remediation tracking, including escalation paths for overdue or high-risk items</li><li>
Establish and maintain processes for periodic reassessments, and continuous monitoring of high-risk/critical vendors</li></ul>
Governance, Reporting, Audit and Regulatory Support<ul><li>
Support internal/external audits and examinations, ensuring evidence, artifacts, and controls are well documented and repeatable</li><li>
Maintain third-party governance materials (policies, risk appetite alignment, RACI, committee presentations, risk acceptance frameworks)</li><li>
Provide reporting and insights to governance forums and leadership committees</li></ul>
People Leadership (as applicable)<ul><li>
Lead, coach, and develop a team of TPRM professionals</li><li>
Set performance expectations, ensure workload prioritization, and build a culture of continuous improvement and strong business partnership</li></ul>
What you bring
Required Qualifications<ul><li>
Bachelor&rsquo;s degree or equivalent practical experience</li><li>
8+ years of experience in third-party risk management, technology risk, operational risk, compliance, or related disciplines</li><li>
3+ years of experience leading programs and/or teams, influencing cross-functional stakeholders, and driving process maturity</li><li>
Proven experience implementing or optimizing TPRM programs and establishing a culture of continuous improvement</li><li>
Proven experience implementing or optimizing TPRM/GRC tools to improve workflow automation, data quality, and reporting</li><li>
Strong ability to translate risk into decision-ready recommendations for leaders and to facilitate risk acceptance discussions</li><li>
Demonstrated knowledge of third-party lifecycle practices: due diligence, control validation, contracting requirements, monitoring, and remediation</li></ul>
Preferred Qualifications<ul><li>
Experience in regulated industries (financial services, healthcare, insurance, payments, or similar)</li><li>
Familiarity with relevant frameworks and expectations (e.g., NIST, ISO 27001, SOC reports, shared responsibility models, vendor oversight guidance)</li><li>
Certifications such as CISA, CRISC, CISSP, CISM, or equivalent</li><li>
Experience integrating continuous monitoring signals (security ratings, threat intelligence, incident notifications) into a TPRM operating model</li></ul>
Core Skills and Competencies<ul><li>
Program maturity leadership: ability to design and scale governance, processes, and metrics</li><li>
Tool-driven execution: strong command of workflow automation, dashboards, and data-driven program management</li><li>
Communication: concise, practical storytelling with clear risk options and tradeoffs</li><li>
Stakeholder influence: confident partnering with business and technology leaders; able to challenge constructively</li><li>
Operational excellence: disciplined prioritization, SLA management, and attention to audit-ready documentation</li><li>
Risk judgment: balanced approach&mdash;protects the organization while enabling the business</li></ul> 
Employee Benefits &amp; Well-Being
Genworth employees make a difference in people&rsquo;s lives every day. We&rsquo;re committed to making a difference in our employees&rsquo; lives.<ul><li>
Competitive Compensation &amp; Total Rewards Incentives</li><li>
Comprehensive Healthcare Coverage</li><li>
Multiple 401(k) Savings Plan Options</li><li>
Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)</li><li>
Generous Paid Time Off &ndash; Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave</li><li>
Disability, Life, and Long Term Care Insurance</li><li>
Tuition Reimbursement, Student Loan Repayment and Training &amp; Certification Support</li><li>
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial &amp; legal management)</li><li>
Caregiver and Mental Health Support Services</li></ul>
ADDITIONAL
<ul><li>At this time, Genworth will not sponsor a new applicant for employment authorization for this position.</li></ul></div>

Senior Manager, Third-Party Risk Management

Truist

<div>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.
Need Help?
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).
Regular or Temporary:
Regular
Language Fluency: English (Required)
Work Shift:
1st shift (United States of America)<h3 class="jobSectionHeader">
Please review the following job description:</h3>
Serve as the independent oversight and effective challenge function to the Chief Information Security Officer covering the Cyber Security and Identity and Access Management domains. Provide guidance to senior leaders across the company on critical cyber control failures and issues; use judgment to escalate significant issues and emerging risks; evaluate, determine and communicate cyber and access management domain maturity to Executive Leadership and the Board of Directors; consistently and appropriately apply second line of defense corporate authority for managing Truist&rsquo;s technology risk, including driving our overall risk appetite for the company for Cyber related functions. 
 
This role will also support effective risk oversight of Cyber&ndash;Fraud integration, with particular emphasis on fraud&rsquo;s dependency on strong authentication, identity controls, and core cyber operations capabilities. This includes overseeing alignment between fraud prevention, IAM, and cyber defense teams to enable consistent, enterprise level risk management.
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
1. Technology Risk Leadership - Provide independent risk oversight (i.e. second line of defense/LOD2) for Truist Technology through the effective identification, mitigation, monitoring and reporting of operational, technology, and compliance related risks within Enterprise Technology with a specifics focus on the Cyber and Identity and Access Management domains.
2. Strategic Alignment &ndash; Provide Cyber and Information Security Risk governance that supports the Truist organization&rsquo;s strategies and objectives while operating within established risk appetites; Provide effective challenge of the Corporate Cybersecurity Strategy for Truist
3. Industry engagement- lead engagement of peer institution second line functions to influence the industry build of the tech risk / cyber second line functions
4. Penetration / Red Team testing- lead execution of independent second line Red Team / Penetration Testing; work is typically commissioned by the Board, the CEO and / or the CRO.
5. Value Delivery &ndash; Ensure that cyber / information security risk resources, activities and initiatives are aligned to enable and sustain achievement of business objectives within forecasted spend rates while reducing risks;
6. Cyber / Information Security Risk Assessment&ndash; Provide independent assessment and oversight of the maturity of information security and adequacy of cyber controls pertaining to information security in meeting agreed to business outcomes for performance, stability, security and service availability. Assessments should leverage agreed upon metrics produced by Business Unit Risk Management (BURM) /first line of defense &ndash; LOD1) but challenged and validated as appropriate;
7. Independent Challenge of LOD1 assessments - Review and attest to/challenge adequacy of risk assessments (i.e. Risk &amp; Control Self-Assessments, Application Assessments, Change Risk Assessments) produced by BURM;
8. Committee Engagement &ndash; Serve as member of the Technology Risk Committee and participate in the Enterprise and Board Risk Committees and the Board Technology Committee, when applicable for Cybersecurity topics;
9. Regulatory Engagement Oversight - Ensure effectiveness and structure in regulatory engagement practices, including responses out of the Corporate Cyber Security Group;
10. Training and Communication - Encourage and monitor Cyber education, skills training and adoption goals to drive improved Cyber risk culture and awareness
11. Policy &amp; Standard Leadership &ndash; Engage on Technology Risk policy governance. Provide direction and guidance in the development, implementation and communication of Cybersecurity policies, procedures and standards; Oversight of multiple enterprise-wide policies including Cyber Security and Identity and Access Management and Truist Cloud.
12. Third Party Management Risk Oversight - Monitor, assess and challenge as appropriate significant third-party and vendor relationships within Enterprise Technology;
13. Cross-Organizational Communication - Develop and maintain effective channels of communication with other CROs, control functions, Senior Business Unit (BU) management, as well as regulatory agencies;
14. Talent Management - Lead, manage and develop teammates directly and indirectly; influence cybersecurity talent management through recommendations to Truist senior leadership, including the Board of Directors, to inform decisions on resource allocations to close control gaps.
Qualifications
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor&rsquo;s degree in financial-related discipline, or equivalent education and related training
2. Fifteen years of experience or equivalent proficiency in managing people with demonstrated high competency in recruiting, developing, and coaching/mentoring
3. Fifteen - Twenty years of experience in a financial institution with emphasis on risk management or equivalent work experience
4. Ten years of large scale technology operations and infrastructure background, including extensive knowledge of technology policy, procedures and regulations
5. Knowledge of key technology rules/regulations and technology risk management practices (e.g. Federal Financial Institutions Examination Council (FFIEC), Control Objectives for Information and Related Technology (COBIT), NIST (National Institute of Standards and Technology), Information Technology Infrastructure Library (ITIL)).
6. Excellent leadership skills including the ability to lead direct and indirect reports
7. Excellent communication (verbal and written), presentation and facilitation skills; ability to influence and communicate with impact
Preferred Qualifications:
1. Master&rsquo;s degree in Finance or Business equivalent
2. Professional designations such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (Information Systems Audit and Control Association) (CRISC), Certified Project Manager (CPM)
3. Strategic business and financial planning experience
4. Experience with audit processes and techniques
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.
EEO is the Law E-Verify IER Right to Work</div>

Senior Cybersecurity Risk Officer

Barclays

<div>Technology Controls Officer | Barclays | Dubai 
 
Join Barclays as a Technology Controls Officer and play a key role in strengthening the technology risk and control environment across our global platforms. 
In this role, you will partner closely with technology teams across APAC and MEA, ensuring that systems are secure, resilient, and aligned with Barclays&rsquo; risk framework and regulatory expectations. Acting as a trusted advisor to engineering and technology stakeholders, you will help embed strong risk and control practices while supporting the delivery of reliable and innovative technology solutions. 
This is an exciting opportunity for someone who enjoys working at the intersection of technology, risk, and governance within a global banking environment. 
Key Responsibilities:<ul><li>
Act as a technology risk and control partner to engineering and platform teams across multiple technology environments.</li><li>
Identify and assess technology risks, ensuring appropriate controls are implemented and operating effectively.</li><li>
Support governance, regulatory compliance, and audit engagements relating to technology controls.</li><li>
Provide guidance on resilience, operational readiness, and risk management across technology platforms.</li><li>
Track and manage control improvements and remediation activities where gaps are identified.</li><li>
Produce clear risk reporting and insights for senior stakeholders and governance forums.</li><li>
Collaborate with technology, risk, and business teams to strengthen the overall technology control environment.</li></ul> 
Essential Criteria:<ul><li>
Experience in technology risk, IT controls, technology governance, or operational risk.</li><li>
Experience working within banking, financial services, or another regulated environment.</li><li>
Strong understanding of technology risk frameworks, control environments, and governance processes.</li><li>
Experience supporting internal or external audits, regulatory requirements, or control testing activities.</li><li>
Ability to partner effectively with technology teams and senior stakeholders.</li><li>
Strong analytical, problem-solving, and communication skills.</li></ul> 
Desirable Criteria:<ul><li>
Professional certifications such as CISA, CISM, CISSP, CRISC, or similar.</li><li>
Experience working across global or multi-regional technology environments.</li><li>
Knowledge of technology resilience, incident management, or business continuity frameworks.</li><li>
Experience supporting technology transformation or large-scale change programmes.</li></ul>
This role is based in Dubai. 
 
You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills.

Purpose of the role
To assess the integrity and effectiveness of the banks internal control framework to support the mitigation of risk and protection of the banks operational, financial, and reputational risk.
Accountabilities<ul><li>
Knowledge of business areas, products, processes and platforms to be able to assess risk</li><li>
Collaboration with various stakeholders across the bank and business units to improve overall control effectiveness through detailed documentation of control assessments, procedures, and findings.</li><li>
Identification and investigation of potential weaknesses and issues within internal controls to promote continuous improvement and risk mitigation aligned to the bank&rsquo;s control framework, prioritised by its severity to disrupt bank operations.</li><li>
Development of reports to communicate key findings from risk assessment including control weaknesses and recommendations to control owners, senior management, and other stakeholders.</li><li>
Execution of reviews to determine the effectiveness of the bank's internal controls framework aligned to established and evolving policies, regulation, and best practice.</li><li>
Implementation of adherence to the Barclays Controls Framework and set appropriate methodology of assessing controls against the Controls Framework.</li></ul>
Vice President Expectations<ul><li>
To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/ processes; deliver continuous improvements and escalate breaches of policies/procedures..</li><li>
If managing a team, they define jobs and responsibilities, planning for the department&rsquo;s future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements..</li><li>
If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L &ndash; Listen and be authentic, E &ndash; Energise and inspire, A &ndash; Align across the enterprise, D &ndash; Develop others..</li><li>
OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi-year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions..</li><li>
Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment.</li><li>
Manage and mitigate risks through assessment, in support of the control and governance agenda.</li><li>
Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does.</li><li>
Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business.</li><li>
Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies.</li><li>
Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In-depth analysis with interpretative thinking will be required to define problems and develop innovative solutions.</li><li>
Adopt and include the outcomes of extensive research in problem solving processes.</li><li>
Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes.</li></ul>
All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship &ndash; our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset &ndash; to Empower, Challenge and Drive &ndash; the operating manual for how we behave.</div>

UAE Technology Controls Officer

JPMorganChase

<div>JOB DESCRIPTION 
Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.
As a Tech Risk &amp; Controls Lead with JPMorgan Chase in Corporate Technology - Infrastructure Management, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. In this role you will be partnering with various stakeholders, including Control and Product Owners, Application and SRE Teams, and Audit and Regulatory partners. You will contribute to the improvement and maintenance of a our technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.
Job responsibilities<ul><li>
Ensures effective identification, quantification, communication, and management of technology risk, focusing on root cause analysis and resolution recommendations</li><li>
Develops and maintains robust relationships, becoming a trusted partner with LOB technologists, assessments teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals</li><li>
Executes reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work</li><li>
Proactively monitors and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance</li></ul>
Required qualifications, capabilities, and skills<ul><li>
5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation</li><li>
Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements</li><li>
Proficient knowledge and expertise in data security, risk assessment &amp; reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies</li><li>
Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives</li></ul>
Preferred qualifications, capabilities, and skills<ul><li>
CISA, CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred</li></ul> 
 
ABOUT US 
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Tech Risk and Controls Lead - Governance Risk & Control

Northern Trust Corp.

<div><div>About Northern Trust:</div><div></div><div>
Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.</div><div></div><div>
Northern Trust is proud to provide innovative financial services and guidance to the world&rsquo;s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world&rsquo;s most sophisticated clients using leading technology and exceptional service.</div><div></div><div>
Technology Risk and Control - Governance and Risk Reporting Lead</div><div></div><div>
Major Duties :</div><div></div><div>
1. Support monthly Technology Risk committee, including preparation for the meetings / stakeholder engagement, facilitation of meetings, production of minutes, tracking of actions / challenge log items and interactions with other committees / working groups.</div><div>
2. Run a Technology Risk advisory forum to triage and vet technology risks. Support escalation of material issues and risks to relevant committees and help to drive informed decision making and robust risk mitigation.</div><div>
3. Maintain agenda and calendar for committee meetings / working groups.</div><div>
4. Support the development and maintenance of monthly Technology Risk Profile reporting, ensuring it provides a clear, decision‑useful view of technology risk posture and trends. Ensure reporting aligns to the Cyber and Technology Risk Management (CTRM) Policy, approved risk taxonomy, and enterprise risk appetite structure.</div><div>
5. Stakeholder Engagement and Cross‑Functional Coordination - Partner closely with Technology Risk &amp; Control, Cyber Risk, Risk Reporting, and Technology leadership to ensure aligned messaging and consistent interpretation of risk data. Act as an escalation point for reporting inconsistencies, data gaps, or material risk concerns identified during reporting cycles. Coordinate inputs and feedback across first‑ and second‑line stakeholders while maintaining appropriate line‑of‑defense boundaries.</div><div></div><div>
Knowledge: Requires excellent communication skills, analytical ability, strong judgment, and the ability to work effectively with IT management and staff, vendors and consultants.</div><div></div><div>
Experience: Bachelor degree in Computer Science or a related discipline and at least six, typically eight or more years experience in risk management and governance related to Technology environments or an equivalent combination of education and work experience.</div><div></div><div>
Salary Range:</div>
$83,100 - 141,300 USD<div></div><div>
Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life &amp; accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.</div><div></div><div>
Working with Us:</div><div></div><div>
As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability is an asset that emboldens us to explore new ideas.</div><div></div><div>
Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to assisting the communities we serve! Join a workplace with a greater purpose.</div><div></div><div>
We&rsquo;d love to learn more about how your interests and experience could be a fit with one of the world&rsquo;s most admired and sustainable companies! Build your career with us and apply today. #MadeForGreater</div><div></div><div>
Reasonable accommodation</div><div></div><div> 
Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at <div>MyHRHelp@ntrs.com</div>.</div><div> 
 
We hope you&rsquo;re excited about the role and the opportunity to work with us. We value an inclusive workplace and understand flexibility means different things to different people.</div><div></div><div>
Apply today and talk to us about your flexible working requirements and together we can achieve greater.</div></div>

Technology Risk and Control - Governance and Risk Reporting Lead

Search 10000+ Technology risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.