Tech Risk and Controls[Multiple Positions Available]

DESCRIPTION:

Duties: Identify and mitigate AI/ML compliance and operational risks in line with the firm's standards.

Provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.

Contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business by partnering with various stakeholders, including Product Owners, Business Control Managers, and Senior Managers.

Drive innovative solutions in a dynamic and evolving risk landscape for our AI/ML product line.

Partner with LOB technologists, assessment teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals.

Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work.

Monitor and evaluate control effectiveness, identify gaps, and recommend enhancements to strengthen risk posture and regulatory compliance.

QUALIFICATIONS:

Minimum education and experience required: Master's degree in Management Information Systems, Electrical and Electronics Engineering, Computer Science, Information Technology, or related field of study plus 4 years of experience in the job offered or as Tech Risk and Controls, Security Analyst, Information Security Risk Analyst, Information Security Analyst, or related occupation.

The employer will alternatively accept a Bachelor's degree in Management Information Systems, Electrical and Electronics Engineering, Computer Science, Information Technology, or related field of study plus 6 years of experience in the job offered or as Tech Risk and Controls, Security Analyst, Information Security Risk Analyst, Information Security Analyst, or related occupation.

Skills Required: This position requires experience with the following: Applying advanced technology risk management principles to identify, assess, and mitigate risks in Cloud and AI/ML environments within financial services including risk quantification and remediation; Designing, implementing, monitoring, and evaluating security and governance controls for cloud and AI/ML systems on AWS and Azure, aligned with risk management frameworks including NIST CSF, NIST SP 800-53, and ISO/IEC 27001; Ensuring compliance with standards and regulations including PCI DSS, SOX, SOC1 and GDPR; Conducting root cause analysis of risks related to Cloud and AI/ML, developing resolution recommendations, and implementing effective risk mitigation strategies; Data security including performing risk assessments, preparing risk reports, and evaluating control effectiveness for systems processing sensitive financial data; Providing advisory to implement and oversee guardrails for AI/ML use case development and deployment, and governance on AWS and Azure; Providing guidance to technology...