Job Description

Join our team to innovate in risk mitigation, leveraging your skills in a fast-paced, impactful environment.

As a Tech Risk & Controls Associate in Cloud Foundational Services (CFS) function, you will be a part of a team that supports controls management of technology units. You will be responsible for identifying and assessing operational risk. Perform testing on design and performance of controls. And develop sustainable solutions to mitigate compliance and operational risks.
As a valued member of the team, you will have the opportunity to learn and grow in a dynamic and fast-paced environment, making a tangible impact on technology risk and controls at the firm.

Job responsibilities

Operational controls management of CFS processes in firmwide risk registry Perform Control Design Evaluation (CDE) of processes and evaluate the risk appropriately Conduct risk analysis and quantification, taking into account both business and technology factors to ensure comprehensive risk assessment Proactively identify risks and periodic reporting of the same Support process owners in managing operational risk and provides transparency to stakeholders Monitor and evaluate the effectiveness of implemented controls, contribute to the recommendations for improvements and addressing gaps in risk management Communicate risk-related findings and updates to relevant stakeholders, ensuring alignment with organizational objectives and risk appetite 

Required qualifications, capabilities, and skills

Formal experience or equivalent expertise in technology risk management, information security, or a related field In-depth knowledge on firmwide risk management and technology hygiene management tools Proficient in risk identification, assessment, and control evaluation, with a strong understanding of industry standards Exposure to risk management frameworks, regulations, and industry best practices 

Preferred qualifications, capabilities, and skills

Cloud Certifications, CISM, CRISC, CISSP, or other industry-recognized risk certifications