SRCTech and cyber risk and ComplianceAssociate

Technology Risk:

• Manage and interpret cyber and technology regulatory requirements to ensure alignment with enterprise risk frameworks and support compliance with global and regional regulations.

• Conduct cyber and technology compliance readiness assessments to evaluate organizational control posture and deliver clear reporting on gaps risks and improvement opportunities.

• Develop andmaintaincyber and technology control frameworks performing control mapping testing and automation initiatives to strengthen control assurance and operational efficiency.

Regulatory:

• Perform cyber and technology risk assessments quantifying risk exposure and preparing structured stakeholder-ready regulatory and governance reporting.

• Execute regulatory gap assessments and design targeted playbooks and remediation plans that drive alignment with cyber technology and regulatory expectations.

• Support remediation efforts for regulatory findings and improvecontrolenvironments for sustainedcompliance.

• Develop regulatory reports and board-level dashboards providing visibility into cyber risk posture technology controls compliance metrics and emerging regulatory trends.

Compliance:

• Design and implement 1LOD and 2LOD cyber and technology compliance programs including governance structures control frameworks and monitoring mechanisms.

• Support technology implementation programs in collaboration with GRC functions ensuring alignment to regulatory standards and compliance-by-design principles.

• Manage cyber and technology regulatory responses coordinating documentation evidence and remediation efforts for regulatory inquiries and examinations.

• Oversee compliance programs aligned to frameworks such as NIST ISO 27001 PCI DSS HIPAA HITRUST and FFIEC ensuring effective adoption andcertification ofreadiness.

• Perform end-to-end cyber and technology control testing tovalidatecontrol effectivenessidentifyweaknesses and recommend risk-based corrective actions.

• Conduct internal and external control assessments to evaluate the adequacy and operational effectiveness of cybersecurity and technology control environments.

• Lead cybersecurity and technology maturity assessmentsbenchmarkcurrent-state maturity defining target maturity levels and recommending uplift strategies.

• Execute information security assessments across policies processes controls and technologies toidentifyrisks and improvement opportunities.

• Support internal audit reviews of technology and cybersecurity functionsvalidatingadherence to standards policies and regulatory expectations.

• Conduct readiness assessments for regulatory exams certification audits and compliance initiatives to ensure organizational preparedness.

• Policy and standard management include writing reviewing updating and managinglifecycletechnology security risk andcompliance withpolicies and control standards

Minimum years experience required

2-5 Years