Tech Risk and Controls Director

Unspecified; São Paulo; Presencial; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A leading financial services firm in Brazil is seeking a Regional Technology Risk & Controls Manager. The role involves managing technology risk, analyzing compliance, and maintaining stakeholder relationships. The ideal candidate should have over 7 years of experience in technology risk management and a strong understanding of cyber security principles. This position promotes diversity and inclusion and offers a dynamic work environment.

Qualificações

• 7+ years of experience in technology risk management or information security.
• Understanding of Enterprise Risk Management practices.
• Ability to manage multiple tasks while achieving high delivery standards.

Responsabilidades

• Define and maintain technology risk and control environment.
• Assess effectiveness of technology controls against requirements.
• Analyze compliance of cyber and technology controls.

Conhecimentos

Technology risk management

Information security

Cloud and on-prem computing

Risk identification and assessment

Financial services regulations

Descrição da oferta de emprego

As Regional Technology Risk & Controls Manager, you will have an opportunity to work with a diverse collection of stakeholders within an exciting technical environment at the leading edge of digital banking and propel your knowledge and experience.

We are looking for someone as part of the Cybersecurity & Technology Controls organization to analyze, consolidate and report on trends/metrics suitable for consumption at varying levels of technical and risk understanding, as well as for all levels of management, including external regulators. The successful candidate will need to be able to understand and articulate cyber and technological risks and work with technical and non-technical control owners to derive actionable and measurable remediation tasks.

Job Responsibilities

• Support/Own the definition and maintenance of the technology risk and control environment for the line of business
• Assess the effectiveness of technology controls against requirements and policy statements
• Support and co-ordinate responses to 2LOD, Audit, Regulator & Customer requests for information on control obligations
• Analyze and report on compliance of cyber and technology controls against Lines of Business, Firmwide and Regulatory Standards
• Maintain relationships with stakeholders to facilitate oversight and effectiveness of the technical control environment
• Support/Own reporting products used to ensure stakeholders are kept appraised of the performance of the technology control environment
• Validate that business Key Risk Indicators are accurately captured & included in prioritization activities.

Required Qualifications, Capabilities, and Skills

• 7+ years of experience or equivalent expertise in technology risk management, information security, or a related field, with a focus on managing risk identification, assessment, and mitigation
• Understanding of Enterprise Risk Management practices in a technical environment.
• Technical and operational understanding of financial services regulations.
• Ability to operate on multiple tasks whilst still achieving high delivery standards.
• Technical Understanding of Cloud and on-prem computing (Public/AWS, Private, Hybrid).

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law.