Tech Risk and Controls Lead

Job responsibilities

• Identifies, quantifies, communicates and manages technology risk, including root-cause analysis, control-gap assessment and actionable remediation recommendations.
• Executes Employee Platforms resiliency governance and roadmap priorities across technology recovery, cyber recovery, public and hybrid cloud, operational resiliency and business service readiness.
• Governs resiliency control procedures, recovery plans, testing obligations, metrics, issues and action plans; provides executive reporting and insight on control effectiveness, risk posture and compliance.
• Leads PTX resiliency governance by partnering with Engineering, Architecture, Product, Application Owners and SRE teams to validate requirements before production and improve recoverability, availability, fault tolerance, scalability, observability and operational resilience.
• Oversees recovery planning, recovery testing, cyber and data recovery, documentation and non-compliant controls at application, platform and component levels, including Technology Recovery Action Plans and Application Recovery Plans.
• Supports test planning, execution, evidence collection and reporting; regulatory, audit and control reviews; and remediation of resiliency findings and action plans.
• Aligns technology recovery capabilities with business continuity objectives by validating service readiness, recovery dependencies and stakeholder response procedures.
• Builds trusted partnerships with Lines of Business, Cybersecurity and Technology Controls, Firmwide Business Resiliency, Firmwide Technology Resiliency, Architecture, Engineering, Infrastructure, assessment teams and data officers.
• Drives simplification, standardization, reuse, automation and continuous improvement across recurring control testing, assessments, evidence collection, reporting, recovery-plan review, testing analysis and remediation tracking.
• Uses enterprise-authorized AI, Large Language Models, Microsoft Copilot, GitHub Copilot, VS Code, agents and analytics to accelerate risk and control work, while validating outputs and maintaining security, transparency, auditability and regulatory alignment.
• Coaches, mentor and train resiliency managers, application owners, engineers, SREs, architects and technology leaders, helping evolve resiliency toward a predictive, automated and AI-enabled capability.
• 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, regulatory compliance or risk mitigation.
• Experience in technology or business resiliency, disaster recovery, infrastructure or platform engineering, SRE, cloud engineering, or a related technology discipline.
• Strong knowledge of resiliency frameworks, recovery planning, operational resiliency, risk management, control governance, testing methodologies and compliance practices.
• Proven success leading complex cross-functional programs, initiatives or governance functions with measurable outcomes and executive visibility.
• Demonstrated ability to influence and build partnerships across Engineering, Architecture, Product, Infrastructure, Cybersecurity, Operations, Risk and Business organizations.
• Exceptional written, verbal, presentation and executive communication skills, with the ability to translate technical concepts into actionable business outcomes.
• Experience using metrics, data analytics and executive reporting to drive organizational improvement and resiliency outcomes.

Company