PENNYMAC Pennymac (NYSE: PFSI) is a specialty financial services firm with a comprehensive mortgage platform and integrated business focused on the production and servicing of U.S. mortgage loans and the management of investments related to the U.S. mortgage market. At Pennymac, our people are the foundation of our success and at the heart of our dynamic work culture. Together, we work towards a unified goal of helping millions of Americans achieve aspirations of homeownership through the complete mortgage journey. A Typical Day We are seeking a highly motivated and experienced Technology Risk Officer to join our IT Risk and Compliance team. In this critical role, you will be responsible for overseeing technology risk within our IT Infrastructure (primarily AWS Cloud environment) domain area. As a key member of the 1st Line of Defense, you will play a pivotal role in developing and maintaining robust policies and procedures, ensuring the effectiveness of our control environment through quality assurance, and supporting our compliance initiatives spanning internal and regulatory audits. This position requires a strong understanding of risk management principles, a keen eye for detail, and the ability to collaborate effectively across various teams. The Technology Risk Officer will: Develop, implement, and maintain comprehensive IT Infrastructure policies and procedures in alignment with industry best practices and regulatory requirements as well as Pennymac Corporate Governance requirements. Perform ongoing Quality Assurance (QA) activities against established policies, procedures, and controls to ensure adherence, effectiveness, and identify areas for improvement. Act as a proactive member of the first line of defense, identifying, assessing, and monitoring technology risks associated with IT infrastructure processes. Collaborate with IT Infrastructure leadership to provide comprehensive governance and support for technology risks, issues, and the lifecycle of policies and procedures. Support internal and external audit engagements pertaining to IT Infrastructure, providing necessary documentation, evidence, and explanations in partnership with key stakeholders. Collaborate closely with internal teams to ensure timely remediation of audit findings and control deficiencies. Contribute to the company's SOX compliance efforts, specifically regarding controls within the IT Infrastructure domain. Provide expert guidance and support to development and operations teams on integrating risk management principles into daily operations and new projects. Develop and oversee Risk Assessments based on Pennymac’s ERM framework. Stay current with emerging technology risks, regulatory changes, and industry trends related to cloud infrastructure, data management, and cybersecurity. What You’ll Bring Required: ○ Proven experience in technology risk management, internal controls, or IT audit roles. ○ Strong understanding of risk assessment methodologies and control frameworks. ○ Familiarity with regulations such as NYDFS, GLBA, NIST CSF, etc. ○ Strong understanding of AWS cloud technologies and security services. ○ Demonstrated ability to develop, implement, and maintain IT policies and procedures. ○ Experience supporting internal audits and SOX compliance initiatives. ○ Excellent analytical, problem-solving, and decision-making skills. ○ Must be a team player with strong attention to detail and able to work independently. ○ Strong analytical thinking, process management and quality control ○ Excellent critical thinking, problem solving, and sound judgment ○ Exceptional written and verbal communication skills, with the ability to articulate complex risk concepts to both technical and non-technical audiences. ○ Ability to work independently, manage multiple priorities, and meet deadlines in a fast-paced environment. ○ Must be highly proficient in G-Suite or Microsoft Excel, Word, and PowerPoint. Highly Desired ○ Experience with Governance, Risk, and Compliance (GRC) programs and methodologies. ○ Practical experience with AWS Cloud infrastructure and services. ○ Understanding of CI/CD (Continuous Integration/Continuous Delivery) pipelines and their associated risks. ○ Experience using risk, issue and compliance management tools such as Jira, Confluence, AuditBoard, and ServiceNow. ○ Financial Services and, if possible, mortgage industry experience preferred. ○ Relevant certifications desirable. Education & Experience ○ Bachelor’s Degree from an accredited college or equivalent work experience. ○ 3+ years of relevant work experience in IT Compliance and Risk and/or Audit Why You Should Join As one of the top mortgage lenders in the country, Pennymac has helped over 4 million lifetime homeowners achieve and sustain their aspirations of home. Our vision is to be the most trusted partner for home. Together, 4,000 Pennymac team members across the country are guided by our core values: to be Accountable, Reliable and Ethical in all that we do. Pennymac is committed to conducting a business that makes positive contributions and promotes long-term sustainable growth and to fostering an equitable and inclusive environment, where all employees and customers feel valued, respected and supported. Benefits That Bring It Home: Whether you're looking for flexible benefits for today, setting up short-term goals for tomorrow, or planning for long-term success and retirement, Pennymac's benefits have you covered. Some key benefits include: Comprehensive Medical, Dental, and Vision Paid Time Off Programs including vacation, holidays, illness, and parental leave Wellness Programs, Employee Recognition Programs, and onsite gyms and cafe style dining (select locations) Retirement benefits, life insurance, 401k match, and tuition reimbursement Philanthropy Programs including matching gifts, volunteer grants, charitable grants and corporate sponsorships To learn more about our benefits visit: https://pennymacnews.page.link/benefits For residents with state required benefit information, additional information can be found at: https://www.pennymac.com/additional-benefits-information Compensation: Individual salary may vary based on multiple factors including specific role, geographic location / market data, and skills and experience as defined below: Lower in range - Building skills and experience in the role Mid-range - Experience and skills align with proficiency in the role Higher in range - Experience and skills add value above typical requirements of the role Some roles may be eligible for performance-based compensation and/or stock-based incentives awarded to employees based on company and individual performance. Salary $95,000 - $155,000 Work Model REMOTE