Tech Risk Control Senior Associate

Job responsibilities

Partner with the Vice President/Executive Director as a key liaison to Governance and Secretary teams supporting Operating Committee and Board Committees, helping ensure materials are accurate, complete, and delivered on time.
Support executive content planning by maintaining topic intake, synthesizing stakeholder inputs, and helping ensure alignment to Cybersecurity & Technology Controls and Global Technology strategic priorities and organizational objectives.
Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft remediation recommendations, validating outputs and handling data according to sensitivity and security requiremen
Maintain a forward-looking calendar of governance forums and key milestones; track dependencies, owners, and actions; and drive day-to-day coordination to keep deliverables on schedule.
Oversee meeting logistics and materials workflows (draft collection, version control, approvals, distribution) in partnership with senior stakeholders to ensure consistent, repeatable execution across governance forums.
Support the team’s Executive Director and VP by converting concepts into first-draft storyboards and executive-ready presentation materials, iterating quickly based on feedback while maintaining clarity, precision, and narrative structure appropriate for senior audiences.
Compile, validate, and summarize key technology risk themes, control observations, and remediation progress to support governance narratives and reporting; escalate gaps, inconsistencies, or emerging issues to the VP/ED for decisioning.
Support assessment and monitoring of technology risks and controls, helping ensure alignment with firm standards, regulatory requirements, and industry best practices.
Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and reporting routines, ensuring human review and alignment to governance standards.

Required qualifications, capabilities, and skills

Formal training or certification on security concepts and 5+ years of experience or equivalent expertise in technology, risk management, information security, legal or a related field, with a focus on risk identification, assessment, and mitigation.
Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.
Experience with directly managing a team or directly influencing other teams to execute objectives and experience in risk identification, assessment, and control evaluation, with a strong understanding of industry standards
Demonstrated ability to analyze complex issues, develop and implement risk mitigation strategies, and communicate effectively with senior stakeholders
Proven ability to develop and maintain strong client and stakeholder relationships and excellent organizational and project management skills, ability to manage multiple competing priorities and work under tight deadlines
High degree of initiative, self-direction, and ability to work well under pressure; intellectual curiosity and ability to learn quickly.

Preferred qualifications, capabilities, and skills

Experience in Technology Risk and Compliance, Information Security, Corporate Governance, Metrics & Reporting, preferably at a global financial services organization
Experience in Corporate Strategy or Consulting and proficient knowledge of risk management frameworks, regulations, and industry best practices.