Associate, Technology, Risk and Controls

HarbourVest Partners (Singapore); Boston (MA); Hybrid; USD 95,000 - 100,000; Full time

Benefits offered by this job

Discretionary annual bonus

Job summary

HarbourVest Partners (Singapore) is seeking a Technology Risk & Control Associate to automate Identity Governance and strengthen regulatory compliance across our global platform.

You will lead risk assessments, develop cybersecurity policies, and collaborate with Legal, Compliance, and Enterprise Risk to embed governance across the organization. This role requires proactive problem-solving and clear communication across technical and non-technical stakeholders.

Qualifications

• BS in Computer Science, Information Security, or equivalent work experience.
• CISM certification required within 1 year of employment.
• 1-2 years of relevant work experience in financial services or related field.

Responsibilities

• Develop automation around Identity Governance for external audits and governance controls.
• Develop and maintain cybersecurity policies, standards, and procedures for regulatory compliance.
• Lead risk assessments and audits to identify threats and mitigate vulnerabilities.
• Collaborate with Legal, Compliance, and Enterprise Risk to integrate cybersecurity initiatives.
• Monitor and report on cybersecurity program effectiveness using KPIs and metrics.
• Stay informed on cybersecurity trends and regulatory changes and implement updates.
• Manage relationships with external auditors, regulators, and collaborators to ensure compliance.

Skills

Identity Governance

Cybersecurity

Regulatory Compliance

Data Analytics

Communication

Project Leadership

Education

BS in Computer Science, Information Security, or equivalent work experience

CISM certification within 1 year

Job description

Job Description Summary

For over forty years, HarbourVest has been home to a committed team of professionals with an entrepreneurial spirit and a desire to deliver impactful solutions to our clients and investing partners. As our global firm grows, we continue to add individuals who seek a collaborative, open-door culture that values diversity and innovative thinking.

In our collegial environment that's marked by low turnover and high energy, you'll be inspired to grow and thrive. Here, you will be encouraged to build on your strengths and acquire new skills and experiences.

We are committed to fostering an environment of inclusion that promotes mutual respect among all employees. Understanding and valuing these differences optimizes the potential of both the individual and the firm.

HarbourVest is an equal opportunity employer.

This position will be a hybrid work arrangement. You will receive 18 remote workdays per quarter to use at your discretion, subject to manager approval. For example, you may choose to work in the office 4 days per week and take one remote day weekly (typically 13 weeks per quarter), leaving 5 additional remote days to be used as needed.

As the Technology Risk & Control Associate at HarbourVest Partners, this job role will be responsible for enhancing Identity Governance processes, and ensuring regulatory compliance, managing risks, and maintaining robust governance policies. This includes, but is not limited to, building automation around Identity management governance processes, supporting the Technology Risk and Control program, and establishing governance frameworks to safeguard systems and sensitive information. Additionally, this role will assist in developing risk management strategies and participate in due diligence processes. This is crucial in navigating the cyber landscape, mitigating risks, and maintaining the firm's reputation.

The ideal candidate is someone who:

• Demonstrates a strong commitment to ethical practices and maintaining the highest standards of honesty and transparency
• Passionate about results, goal driven, outspoken, accountable, and collaborative
• Able to drive business decisions using data and comfortable reporting on metrics
• Familiar working at a company with a global presence spanning multiple time zones
• Self-starter with demonstrable ability to work independently and prioritize tasks and time effectively
• Lead high-visibility and critical security projects to support a dynamic business environment
• Takes the initiative to identify and address potential issues before they become significant problems

What you will do:

• Develop program automation around Identity Governance in support of our external audit and internal governance controls.
• Drive and own the development and maintenance of cybersecurity policies, standards, and procedures to ensure compliance with industry regulations and guidelines.
• Lead regular risk assessments and audits to identify potential threats and vulnerabilities, as well as help develop mitigation strategies.
• Act as key point person to collaborate closely with the Legal, Compliance, and Enterprise Risk teams to support the integration of cybersecurity initiatives across the organization.
• Monitor and report on the effectiveness of the cybersecurity program, including key performance indicators and metrics.
• Stay informed about the latest cybersecurity trends, threats, and regulatory requirements, and provide support in implementing relevant updates.
• Assist in managing relationships with external auditors, regulators, and other collaborators to ensure compliance with relevant laws and regulations.

What you bring:

• Demonstrable experience in the financial services industry, with an understanding of specific security challenges and regulatory requirements.
• Ability to learn new skills and incorporate them into automation projects
• The ability to support the development and implementation of robust cybersecurity policies and procedures that align with industry guidelines and regulatory requirements.
• Clear and effective communication to share cybersecurity concepts with both technical and non-technical collaborators.
• A proactive approach to staying ahead of the latest cybersecurity trends and threats, ensuring the organization remains well-protected.
• The ability to build and maintain positive relationships with external auditors, regulators, and other collaborators, ensuring compliance with relevant laws and regulations.

Education Preferred

• BS in Computer Science, Information Security, or equivalent work experience
• Certified Information Security Manager (CISM) required within 1 year of employment

Experience

• 1-2 years of relevant work experience

#LI-Hybrid

Base Salary Range: $95,000.00 - $100,000.00

This USD base salary range represents only one component of total compensation for this role and is provided in accordance with local requirements. This role is eligible for a discretionary annual bonus, which is determined based on indiv