AVP Operational, Technology Risk Management

This is a fully remote position, open to applicants in Florida, +3 more states.

📋 Description

• Develop and oversee a comprehensive Operational Risk Management program for all funds.

• Recognize and evaluate operational, technology, cybersecurity, third-party, fraud, personnel, legal, and model risks, along with related controls and risk appetite thresholds.

• Establish and maintain a Risk and Control Self-Assessment (RCSA) program, which includes risk evaluation, scoring of control effectiveness, risk-based control testing, corrective action plans, and documented procedures.

• Leverage automation and AI to create process flows, design and automate controls, and evaluate control effectiveness.

• Develop and oversee Technology and Cybersecurity Risk Management with independent oversight of technology governance, cybersecurity, cloud and infrastructure, identity and access management, data, software development and changes, artificial intelligence, and system resilience.

• Work in tandem with Technology & Operations to improve real-time risk sensing and anomaly detection.

• Develop and manage Third-Party Risk Management, including due diligence, risk tiering, contracting, monitoring, issue and control management, and exit planning.

• Evaluate third-party operational, technology, cybersecurity, financial, regulatory, reputational, and concentration risks.

• Establish and oversee Change Management Risk for organizational and process modifications, new products, systems, and vendors.

• Assist with Issue & Incident Management and Business Continuity Plan programs by identifying control failures and enhancing controls and processes.

• Design and implement Risk Intelligence data and reporting using automation, AI, and visualization tools.

• Provide data-driven risk insights, predictive analytics, and forecasts.

• Act as a trusted cross-functional partner, offering challenges, insights, and practical recommendations.

• Report directly to the Vice President of Risk Management.

⛳️ Requirements

• A Bachelor’s degree in Cybersecurity, Information Systems, Electrical/Computer Engineering, Computer Science, Risk Management, or a related technical field.

• Over 5 years of relevant experience in operational risk, technology and cybersecurity risk, third-party risk, IT audit, or internal controls within asset or investment management, ETF platforms, or the broader financial services sector.

• Relevant professional certifications such as CISA, CRISC, CISSP, or CIA.

• Proficient understanding of operational and technology risk frameworks and standards, including COSO, COBIT, NIST, or ISO.

• Experience in designing, implementing, or leading an RCSA program, covering methodology development, risk and control taxonomies, inherent and residual risk scoring, assessment scoping, evidence review, control evaluation, and governance reporting.

• Familiarity with using automation, AI, data analytics, and data visualization to enhance risk identification, assessment, monitoring, RCSA execution, workflow management, dashboards, and reporting.

• Outstanding written, verbal, facilitation, and interpersonal skills, with the capability to translate complex operational and technology risks into clear decisions, provide credible challenges, and influence stakeholders in a fast-paced, high-growth environment.

• Preferred location proximity to Chicago, IL; Milwaukee, WI; New York City, NY; or West Palm Beach, FL.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health and wellness programs.

• Opportunities for professional development and growth.

• Flexible work arrangements to promote work-life balance.