1LOD Tech & Cyber Risk Leader

Socket.dev; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

SoFi is seeking an experienced Business Controls Lead to oversee the 1LOD risk management for Technology and Cybersecurity, spanning Engineering, Information Security, Infrastructure, and Data across SoFi entities. You will guide risk programs, drive assessments, and partner with senior leaders to ensure effective controls and regulatory readiness.

You will own RCSA, control testing, risk reporting, and remediation initiatives, while coordinating with CTO, CISO, and Board committees to

Qualifications

• 15+ years of experience in Risk Management, Information Security, or Technology Risk.
• At least 5+ years in a leadership role within a highly regulated financial services environment.
• Deep understanding of NIST frameworks, FFIEC guidelines, Cloud Security, and SDLC.
• Proven ability to build and lead Business Control functions (e.g., Insider Threat, EUC).
• Excellent executive communication with CTO, CISO, and Board members.

Responsibilities

• Serve as the primary 1LOD Risk Partner for Technology and Cybersecurity across all entities.
• Own strategy, governance, and execution of enterprise risk programs including Insider Threat, EUC, AI Governance, ITAM.
• Collaborate with Compliance, Risk Management, Audit, and Regulators to support risk initiatives.
• Identify, measure, monitor, and control existing and emerging risks with Engineering and Security leaders.
• Lead RCSA framework maintenance and testing; remediate gaps and improve controls.
• Create 1LOD risk reporting and present to CTO, CISO, and Board committees.
• Interface with regulators (Federal Reserve, OCC, CFPB) and internal audits.
• Drive adherence to industry frameworks such as CoBit, NIST, and FFIEC guidance.

Skills

Executive communication

Leadership

Risk management

Job description

SoFi is seeking an experienced Business Controls Lead to oversee the 1LOD risk management for Technology and Cybersecurity, spanning Engineering, Information Security, Infrastructure, and Data across SoFi entities. You will guide risk programs, drive assessments, and partner with senior leaders to ensure effective controls and regulatory readiness.

You will own RCSA, control testing, risk reporting, and remediation initiatives, while coordinating with CTO, CISO, and Board committees to