Associate Director, Embedded Risk Manager - Application Development

Talon Professional Services; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Talon Professional Services is seeking an Associate Director, Embedded Risk Manager in the Application Development space for a hybrid role with three days onsite in Jersey City, NJ. The contract-to-direct-hire opportunity focuses on integrating risk management into the software development lifecycle and collaborating with development teams and risk stakeholders.

You will support audit readiness, remediation planning, and risk reporting, while promoting a strong risk culture and proactive

Qualifications

• Minimum of 8+ years experience in technology risk and related fields within a complex environment.
• Deep knowledge of the software development lifecycle (SDLC), application controls, change management, and secure development practices.
• Proven ability to support audit readiness, issue management, remediation planning, and risk reporting processes.
• Strong stakeholder management skills capable of influencing senior application development and risk stakeholders.
• Experience analyzing risk, controls, audit data, incidents, and remediation activities to derive actionable insights.

Responsibilities

• Collaborate with development teams and risk stakeholders to strengthen controls.
• Support audit readiness, remediation planning, and risk reporting.
• Promote a robust risk culture and operational resilience.
• Produce clear risk reports and executive summaries.

Skills

Technology risk

SDLC knowledge

Audit readiness

Stakeholder management

Risk reporting

GRC platforms

Education

Bachelor's degree

Tools

Jira

Confluence

Power BI

Tableau

Job description

Job Title: Associate Director, Embedded Risk Manager - Application Development

Workplace Type: Hybrid-3 Days Onsite (Jersey City, NJ)

Employment Type: Contract to Direct Hire**

Overview

Join a leading organization as an Embedded Risk Manager within the Application Development space, where your expertise will be pivotal in integrating risk management practices into the software development lifecycle. This critical role involves collaborating with development teams, risk stakeholders, audit professionals, and external partners to strengthen controls, enhance risk awareness, and promote a robust risk culture. If you are passionate about technology risk, have a proven track record in audit and control management, and thrive in complex, regulated environments, this opportunity offers a platform to make a significant impact in shaping effective risk strategies and ensuring operational resilience.

Required Skills

• Minimum of 8+ years experience in technology risk, application development risk, IT controls, cybersecurity risk, or related fields within a complex environment.
• Deep knowledge of the software development lifecycle (SDLC), application controls, change management, and secure development practices.
• Proven ability to support audit readiness, issue management, remediation planning, and risk reporting processes.
• Strong stakeholder management skills capable of influencing senior application development and risk stakeholders.
• Experience analyzing risk, controls, audit data, incidents, and remediation activities to derive actionable insights.
• Familiarity with GRC platforms like Archer, ServiceNow, Power BI, Tableau, Jira, or Confluence is advantageous.
• Excellent verbal and written communication skills with the ability to produce clear, concise risk reports and executive summaries.

Nice to Have Skills

• Experience in financial services, banking, insurance, or regulated industries.
• Knowledge of DevSecOps, secure SDLC, change, and release management.
• Familiarity with AI, large language models, and automation for risk insights and control analysis.
• Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT, ITIL, or SAFe.

Preferred Education and Experience

• Bachelor’s degree is required.
• Extensive experience in technology and application development environments, ideally in highly regulated sectors.

Other Requirements

• This role requires a hybrid working model with three days onsite at our Jersey City location.
• Candidates must possess a strong understanding of risk culture cultivation and proactive control issue identification.