Role Title: Technology Risk Advisor

Experience

• Has built and run technology risk programs or significant processes therein
• Has worked as a Director or higher in a large organization or Senior Manager or higher in a consulting org; audit experience is welcome
• Has worked in designing technology controls and processes
• Has some technology operations experience
• Has knowledge of the Three Lines of Defense in financial institutions

Capabilities

• Able to explain risk and control design concepts to technologists
• Able to operate as an individual contributor for extended periods
• Able to learn and navigate a complex organization quickly
• Able to develop solutions to technology risks issues by leveraging knowledge of best practices and adaptive thinking
• Strong process-based thinker
• Self-directed and well organized

To avoid

• No prior experience in technology operations
• Overly academic or unwilling to adapt to pragmatic realities
• Unable to work extended hours when needed
• Is not a doer
• Is not detail oriented

Role profile description:
 CISO has a need for a senior technology risk expert to support a variety of program related and operational activities.

The successful candidate will:

• Assist the CISO with assessing complex technology risk matters, developing solutions and making recommendations.
• The candidate will assist the CISO in preparing for senior level discussions and in certain cases be asked to represent the CISO
• The candidate will attend some meetings with the CISO and take on action items as directed by the CISO
• Support the CISO in developing elements of a technology risk program
• Develop and speak to both high level and detailed documentation and presentations on technology risk activities

This role works for the CISO directly and will work along side an existing technology risk management function as a peer. The role has no staff supporting it and will generally be expected to operate independently.