Tech Risk and Controls Associate Resiliency

Tech Risk and Controls Associate supports resiliency governance across CTC applications. You will partner with engineering teams to validate and continuously improve recovery strategies and architectures contributing to design reviews and providing practical guidance on AWS and distributed systems resiliency. Youll coordinate resiliency testing curate evidence and metrics and help ensure critical CTC business processes remain within impact tolerances during disruptions. This role blends hands-on technical governance with structured testing architecture reviews and data-driven insights.

Responsibilities

• Resiliency governance and documentation
  • Support the resiliency governance framework for CTC applications; align artifacts to firm policies and standards.
  • Maintain and refresh business impact assessments recovery strategies plans and runbooks; ensure version control and quality.
  • Coordinate the annual test calendar (e.g. recovery strategy validation failover tabletop/MEPC) and assemble examready evidence.
• Resiliency testing and validation
  • Schedule prepare and track resiliency tests; document results issues and remediation actions.
  • Support controlled chaos experiments in partnership with engineering using firmapproved tooling; maintain clear guardrails and safe blast radius; capture outcomes and lessons learned.
• Resiliency architecture and technical collaboration
  • Participate in resilience design reviews; contribute questions and observations to strengthen recovery approaches.
  • Apply working knowledge of AWS resiliency patterns (e.g. RDS MultiAZ backups/PITR S3 versioning Route 53 health checks/failover Auto Scaling; basic CloudWatch alarms).
  • Understand common modern app patterns (microservices REST/eventdriven) and failure handling (timeouts retries backoff circuit breakers) to inform governance reviews.
• Resiliency metrics and reporting
  • Help publish/track SLOs and recovery objectives (RTO/RPO MTTR) for critical services; maintain dashboards/MI.
  • Summarize trends on test coverage control effectiveness and issue aging for leadership updates.
• Issue and risk management
  • Log and track issues exceptions and risk acceptances to durable closure; escalate when needed.
• Stakeholder coordination and incident support
  • Coordinate across technology cybersecurity architecture risk/compliance and audit teams.
  • Support incident/crisis events with notes communications and postincident action tracking.

Required Qualifications and Skills

• 24 years in technology resiliency operational resilience SRE/operations technology risk/governance or application engineering in cloudenabled environments.
• Working knowledge of AWS and modern application architecture:
  • Core resiliency constructs (MultiAZ basics backup/restore health checks auto scaling CloudWatch alarms).
  • Understanding of distributed systems basics and failure patterns (timeouts retries backoff circuit breakers).
• Experience coordinating tests/exercises and documenting results; ability to track remediation to completion.
• Proficiency with Excel or similar for MI; able to interpret SLOs and RTO/RPO and communicate clear riskbased updates.
• Familiarity with Infrastructure as Code concepts (Terraform or CloudFormation) and automation guardrails; able to review for basic compliance/recovery readiness.
• Strong communication organization and stakeholder coordination skills.

Preferred Qualifications

• AWS Cloud Practitioner or higher (e.g. AWS Solutions Architect Associate); or comparable certifications.
• Exposure to internal audit/regulatory reviews and evidence preparation.
• Familiarity with SRE and chaos engineering concepts from a governance/support perspective.
• Experience with JIRA and Confluence