Technology Risk & Controls Lead - Infrastructure

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk & Controls Lead in the Infrastructure Platforms organization, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards.

You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.

By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business.

Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

Job responsibilities


* Identifies, assesses, and prioritizes technology, cyber, and operational risks across infrastructure platforms, including virtualized environments, hosted services, vendor relationships, third party integrations, and managed data center space


* Provides expert guidance to engineering, supply chain, and IPI teams on risk remediation strategies, leveraging advanced Unix/Linux system administration, vulnerability management, and automation skills


* Will advise on risk controls for hardware/software lifecycle management, including break-fix, maintenance, and exception handling


* Facilitates investigations into security incidents, configuration drift, and operational failures


* Performs root cause analysis and drive sustainable remediation and control improvements


* Designs, implements, and tests controls to ensure compliance with firm policies, regulatory requirements, and industry standards


* Oversees governance of technology asset management, onboarding, and exception processes


* Will advise on secure onboarding, configuration, and testing of new hardware/software, ensuring compliance with Technology Asset Governance (TAG) and Technology Product Catalog (TPC)


* Will advise on capacity planning, performance testing, and infrastructure optimization to mitigate risks related to resource utilization and operational stability


* Champions the use of automation tools for risk monitoring, reporting, and control enforcement.

Identify opportunities to streamline workflows and enhance operational efficiency

Required qualifications, capabilities, and skills


* 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation


* Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of...