Associate, Technology, Risk and Controls

HarbourVest Partners, LLC; Boston (MA); Hybrid; USD 95,000 - 100,000; Full time

Benefits offered by this job

Annual bonus

Total rewards package

Job summary

HarbourVest Partners in the United States is seeking a Technology Risk & Control Associate to enhance Identity Governance, support regulatory compliance, manage risks, and strengthen governance policies. The role emphasizes automation, risk assessments, and close collaboration with Legal, Compliance, and Enterprise Risk teams.

You will operate in a hybrid environment with quarterly remote days and contribute to cybersecurity initiatives across our global firm.

Qualifications

• Demonstrable experience in the financial services industry and regulatory requirements.
• Ability to learn new skills and apply them to automation projects.
• Support development and implementation of robust cybersecurity policies and procedures that align with industry guidelines and regulations.
• Clear and effective communication to share cybersecurity concepts with technical and non-technical collaborators.
• Proactive approach to staying ahead of cybersecurity trends and threats.
• Build and maintain positive relationships with external auditors, regulators, and collaborators.

Responsibilities

• Develop program automation around Identity Governance for external audits and internal governance controls.
• Drive and maintain cybersecurity policies, standards, and procedures for regulatory compliance.
• Lead regular risk assessments and audits and help develop mitigations.
• Collaborate with Legal, Compliance, and Enterprise Risk teams to support cybersecurity initiatives.
• Monitor and report on cybersecurity program effectiveness using KPIs and metrics.
• Stay informed on cybersecurity trends, threats, and regulatory requirements; implement updates.
• Assist in managing relationships with external auditors and regulators to ensure compliance.

Skills

Automation projects

Cybersecurity policies

Data-driven decisions

Communication

Regulatory awareness

Auditor relations

Education

BS in Computer Science or Information Security

CISM certification within 1 year

Tools

N/A

Job description

For over forty years, HarbourVest has been home to a committed team of professionals with an entrepreneurial spirit and a desire to deliver impactful solutions to our clients and investing partners. As our global firm grows, we continue to add individuals who seek a collaborative, open-door culture that values diversity and innovative thinking. In our collegial environment that’s marked by low turnover and high energy, you’ll be inspired to grow and thrive. Here, you will be encouraged to build on your strengths and acquire new skills and experiences. We are committed to fostering an environment of inclusion that promotes mutual respect among all employees. Understanding and valuing these differences optimizes the potential of both the individual and the firm.

HarbourVest is an equal opportunity employer.

This position will be a hybrid work arrangement. You will receive 18 remote workdays per quarter to use at your discretion, subject to manager approval. For example, you may choose to work in the office 4 days per week and take one remote day weekly (typically 13 weeks per quarter), leaving 5 additional remote days to be used as needed.

As the Technology Risk & Control Associate at HarbourVest Partners, this job role will be responsible for enhancing Identity Governance processes, and ensuring regulatory compliance, managing risks, and maintaining robust governance policies. This includes, but is not limited to, building automation around Identity management governance processes, supporting the Technology Risk and Control program, and establishing governance frameworks to safeguard systems and sensitive information. Additionally, this role will assist in developing risk management strategies and participate in due diligence processes. This is crucial in navigating the cyber landscape, mitigating risks, and maintaining the firm’s reputation.

The ideal candidate is someone who: Demonstrates a strong commitment to ethical practices and maintaining the highest standards of honesty and transparency Passionate about results, goal driven, outspoken, accountable, and collaborative Able to drive business decisions using data and comfortable reporting on metrics Familiar working at a company with a global presence spanning multiple time zones Self-starter with demonstrable ability to work independently and prioritize tasks and time effectively Lead high-visibility and critical security projects to support a dynamic business environment Takes the initiative to identify and address potential issues before they become significant problems

What you will do:

• Develop program automation around Identity Governance in support of our external audit and internal governance controls.
• Drive and own the development and maintenance of cybersecurity policies, standards, and procedures to ensure compliance with industry regulations and guidelines.
• Lead regular risk assessments and audits to identify potential threats and vulnerabilities, as well as help develop mitigation strategies.
• Act as key point person to collaborate closely with the Legal, Compliance, and Enterprise Risk teams to support the integration of cybersecurity initiatives across the organization.
• Monitor and report on the effectiveness of the cybersecurity program, including key performance indicators and metrics.
• Stay informed about the latest cybersecurity trends, threats, and regulatory requirements, and provide support in implementing relevant updates.
• Assist in managing relationships with external auditors, regulators, and other collaborators to ensure compliance with relevant laws and regulations.

What you bring:

• Demonstrable experience in the financial services industry, with an understanding of specific security challenges and regulatory requirements.
• Ability to learn new skills and incorporate them into automation projects
• The ability to support the development and implementation of robust cybersecurity policies and procedures that align with industry guidelines and regulatory requirements.
• Clear and effective communication to share cybersecurity concepts with both technical and non-technical collaborators.
• A proactive approach to staying ahead of the latest cybersecurity trends and threats, ensuring the organization remains well-protected.
• The ability to build and maintain positive relationships with external auditors, regulators, and other collaborators, ensuring compliance with relevant laws and regulations.

Education Preferred

• BS in Computer Science, Information Security, or equivalent work experience
• Certified Information Security Manager (CISM) required within 1 year of employment

Experience 1-2 years of relevant work experience

#LI-Hybrid Base Salary Range: $95,000.00 - $100,000.00

This USD base salary range represents only one component of total compensation for this role and is provided in accordance with local requirements.

Benefits

• This role is eligible for a discretionary annual bonus, which is determined based on individual and overall firm performance.
• In addition to salary and bonus eligibility, total compensation may include participation in long-term reward programs (typically for more senior-level roles).
• We also offer a comprehensive total rewards package that may include retirement contributions, health insurance, income protection, paid time off and leave benefits as well as well-being programs.

Our total rewards offerings are influenced by several business factors, and eligibility for certain components will vary by position and geography. Please note the posted ranges do not apply outside the U.S. and should not be converted to other currencies as a proxy for compensation in other countries.

HarbourVest is an independent, global private markets firm with 44 years of experience and more than $160 billion assets under management as of March 31, 2026. Our interwoven platform provides clients access to global primary funds, secondary transactions, direct co-investments, real assets and infrastructure, and private credit. Our strengths extend across strategies, enabled by more than 1,200 team members across the Americas, Asia, Europe, and the Middle East. Please note that all other Key Firm Stats, where provided, are as of March 31, 2026, unless otherwise noted.