Principal Tech Resiliency
$184,000–$230,000 year
HybridNew York City, New York, United States or Scottsdale, Arizona, United States
Job Summary
Conduct independent second-line oversight and credible challenge of first-line technology risk management activities across infrastructure, cybersecurity, cloud, and AI domains. Evaluate the design and execution of risk practices, including control validation, key risk indicators, and remediation plans, to ensure alignment with enterprise frameworks and regulatory expectations. Review risk self-assessments, root cause analyses, and closure evidence to identify trends and emerging themes in risk exposure. Partner with first-line leaders and subject matter experts to improve control expectations and provide ongoing advisory support for strengthening governance routines. Prepare reporting and escalation materials for senior leaders and risk committees while maintaining objectivity and accountability.
Required Qualifications
- Independently possess the eligibility to work in the United States, for any employer, at the date of hire
- Bachelor's degree or equivalent
- 12 years of experience or demonstrated portfolio consistent with experience required of the role in technology risk, information security, operational risk, or related disciplines within a regulated or otherwise complex operating environment
- Strong understanding of risk management practices, control frameworks, and second-line oversight within a three lines of defense model
- Demonstrated experience providing independent review, challenge, or governance of first-line technology, security, data, or operational risk activities
- Strong ability to assess control design and effectiveness, synthesize risk data, identify themes, and translate technical issues into business risk
- Excellent written, verbal, presentation, and stakeholder management skills, including experience interacting with senior leaders and cross-functional partners
- Strong critical thinking, judgment, and problem-solving skills, with the ability to provide practical, risk-based recommendations in a complex environment
- Ability to operate independently, manage competing priorities, and maintain effective working relationships while preserving second-line objectivity
- Background and drug screen
Desired Qualifications
- Advanced degree or additional related education and/or experience
- Experience in financial services, payments, fintech, or another highly regulated industry
- Familiarity with relevant regulatory expectations and industry standards and frameworks applicable to technology and security risk management such as; ISO 27002, PCI DSS, NIST, FFIEC, and SOC 2
- Experience supporting governance committees, audits, examinations, or regulatory interactions
- Relevant risk, security, audit, or control certifications preferred such as CISA, CISM, CISSP, CCSP, CRISC, GSNA, CGIH, or equivalent
- Project or process management experience supporting cross-functional risk, control, or governance initiatives
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.