Senior Manager, Technology Risk

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct an independent second-line evaluation and provide a credible challenge to first-line technology and information security initiatives, which encompass but are not limited to: cybersecurity controls, software development lifecycle (SDLC), incident response programs, technology resiliency, and third-party arrangements.

• Supervise the execution of the FFIEC Cybersecurity Assessment Tool (CAT) or similar frameworks; perform technology and security risk assessments; and deliver independent oversight of technology and security risks in accordance with OCC guidance on cloud computing.

• Act as the primary second-line liaison for OCC examiners, internal audit, and other external stakeholders regarding technology risk and information security program subjects and inquiries; prepare and present technology risk reports to risk committees, the Chief Risk Officer (CRO), and the board.

• Build and manage a developing Technology Risk team, influencing how the bank recognizes, prioritizes, and addresses its critical technology and security risks in line with relevant industry regulations.

• Collaborate with first-line IT and cybersecurity teams, Third-Party Risk Management (TPRM), Enterprise Risk Management (ERM), Legal, and Compliance to ensure that technology and information security risks are woven into enterprise risk programs, cross-functional risk assessments, and the bank's overall Second Line of Defense (2LOD) reporting and governance framework.

⛳️ Requirements

• A Bachelor's degree or equivalent practical experience in information technology, cybersecurity, or a related discipline.

• Over 8 years of experience in technology risk, information security risk management, IT audit, or Governance, Risk, and Compliance (GRC) within a banking or financial services context.

• At least 3 years of direct management experience supervising professionals in technology risk, information security governance, risk, compliance, or IT audit.

• Proven experience applying FFIEC IT Examination Handbook standards and OCC guidance on technology risk and information security within a bank or federally regulated organization.

• Experience interacting with banking regulators (OCC, FDIC, or Federal Reserve) regarding technology risk, cybersecurity, or IT controls examination topics.

🏝️ Benefits

• Competitive salary package, which includes base pay, bonus opportunities, and annual equity grants that vest quarterly.

• Retirement benefits to assist you in planning for the future, featuring a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada).

• Employee Stock Purchase Plan (ESPP) offering discounted stock purchase options for eligible employees (US only).

• Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for those in the US and supplemental health coverage for Canada.

• Health Savings Account contributions from Upstart for eligible plans (US only).

• Income protection benefits, incorporating life insurance and disability coverage for enhanced financial security.

• Paid time off, sick leave, and company holidays, adhering to local regulations.

• Paid family and parental leave to assist with caregiving and significant life events (duration varies by country).

• Family-oriented benefits aimed at supporting fertility, parenthood, and caregiving needs.

• Employee Assistance Program (EAP) that provides mental health support and life-centered resources.

• Financial wellness resources, including access to financial planning tools and a financial concierge service (US only).

• Annual wellness allowance to promote your physical and emotional well-being and personal development, tailored to what matters most to you.

• Annual productivity allowance to invest in the necessary tools and resources to excel in your work, regardless of your location.

• Opportunities for connection and community through team events, all-company updates, and employee resource groups (ERGs).

• Onsite benefits such as catered lunches and fully stocked micro-kitchens when working from one of our offices in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!).