Let's begin! Asst Dir-Risk Management

Skills and Competencies

• Proven experience in technology risk operational risk cybersecurity or compliance within a regulated or enterprise environment with expertise in identifying assessing and mitigating business and technology risks
• Strong knowledge of risk and control frameworks including ISO 27001 SOC NIST COSO GDPR and related governance risk and compliance practices
• Experience managing vulnerability governance processes validating remediation plans monitoring control effectiveness and reducing technology risk exposure
• Understanding of application security secure software development lifecycle (SDLC) security-by-design principles technical debt management and infrastructure risk mitigation
• Strong analytical problem-solving and stakeholder management skills with the ability to communicate complex technical risks to both technical and non-technical audiences
• Experience supporting audits regulatory compliance activities customer assurance programs vendor risk assessments and GRC platforms such as ServiceNow Archer OneTrust or AuditBoard

Education

• Bachelors degree in Business Risk Management Computer Science or a related discipline
• Professional certifications such as CISA CRISC CISSP Security or ISO 27001 Lead Implementor/Auditor are preferred

Responsibilities

• Identify assess monitor and report technology operational and cybersecurity risks across the Insurance Business Unit to support business objectives and regulatory requirements
• Manage vulnerability governance processes including remediation tracking risk treatment validation escalation management and control gap closure
• Partner with engineering and product teams to embed secure development practices vulnerability management secure design principles and testing standards
• Evaluate technology risk drivers including technical debt legacy platforms infrastructure weaknesses and control deficiencies while supporting remediation prioritization
• Support governance compliance and assurance activities through control assessments issue management policy reviews audit coordination and framework alignment
• Contribute to customer assurance and commercial initiatives by supporting RFP responses vendor assessments security reviews and customer due diligence activities
• Collaborate with stakeholders across engineering cybersecurity legal compliance and business teams to strengthen controls and improve risk outcomes
• Develop and maintain risk dashboards metrics and reporting capabilities that provide actionable insights for decision-making and continuous improvement

About the Team
The Risk Management team within the Insurance Business Unit serves as the first line of defense driving the adoption of effective risk management practices and fostering a strong culture of risk awareness. Working closely with engineering product and business stakeholders the team proactively manages technology and operational risks strengthens control environments supports regulatory and customer expectations and enables sustainable business growth.