AVP Operational & Technology Risk Management

Tidal Financial Group; United States; Remote; USD 95,000 - 140,000; Full time

Job summary

The Tidal Financial Group seeks an AVP of Operational & Technology Risk Management to lead and coordinate risk programs across operations, technology, and third parties, leveraging automation and AI to improve reporting and controls.

Reporting to the VP of Risk Management, the role focuses on RCSA, risk governance, business continuity, incident management, and cross-functional leadership to support growth and resilience across ETF platforms.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, information systems, engineering, computer science, risk management, or related technical field.
• 5+ years of experience in operational risk, technology and cybersecurity risk, third-party risk, IT audit, or internal controls within asset or investment management or broader financial services.
• Relevant professional certifications such as CISA, CRISC, CISSP, or CIA.
• Familiarity with risk frameworks and standards such as COSO, COBIT, NIST, or ISO.
• Experience designing, implementing, or leading an RCSA program and governance reporting.
• Experience using automation, AI, data analytics, and data visualization to improve risk identification, assessment, monitoring, and reporting.
• Strong written, verbal, facilitation, and interpersonal skills; ability to translate complex risks into clear decisions.

Responsibilities

• Operational Risk Management: Build and manage an enterprise-wide operational risk program including identification, assessment, and appetite.
• RCSA Program: Design, implement, and monitor risk control self-assessments with testing, remediation, and governance reporting.
• Technology & Cybersecurity Risk: Lead governance for technology risk, cybersecurity, cloud, IAM, data, software development, and resilience.
• Third-Party Risk Management: Oversee risk across vendors, service providers, and brokers, including due diligence and monitoring.
• Change Management Risk: Assess risks from organizational changes, new products, systems, and vendors; ensure readiness and control updates.
• Issue & Incident Management and BCP: Support incident management and business continuity with effective controls.
• Risk Intelligence: Design risk data and reporting using automation and visualization for proactive decisions.
• Cross-Functional Leadership: Partner with teams to provide balanced challenge and practical recommendations.

Job description

AVP Operational & Technology Risk Management

The Tidal Financial Group is a leading ETF investment technology platform dedicated to creating, operating, and growing ETFs. We combine expertise and innovative partnership approaches to offer comprehensive, value-generating ETF solutions.

Our platform offers best-in-class strategic guidance, product planning, trust and fund services, legal support, operations support, marketing and research, and sales and distribution services.

About the role

Tidal's Assistant Vice President ("AVP") of Operational & Technology Risk Management is a multidisciplinary role that will be a valued contributor to delivering and managing our AI-driven Program target state. The AVP will leverage their operational and technology risk expertise and technical capabilities to use automation and AI to support our target state mission, which will deliver a fully integrated Program that maximizes the efficiency and value of its processes and reporting. The AVP’s core responsibilities include operational risk management, Risk and Control Self-Assessment (RCSA), technology and cybersecurity risk, third-party risk, and change management risk.

Reporting directly to the VP of Risk Management, the AVP will bring a passionate, entrepreneurial, and disciplined mindset towards ensuring we maximize our Program’s contribution and value to Tidal as it continues to grow and become more operationally complex

What you'll do

• Operational Risk Management : Build and manage an Operational Risk Management program that includes the identification and assessment of operational, technology, cybersecurity, third-party, fraud, people, legal, and model risks, as well as related controls and risk appetite limits, at the enterprise level and across all funds.
• Risk and Control Self-Assessment Program : Build and manage an RCSA program that systematically identifies, evaluates, and scores operational risks and the effectiveness of the controls mitigating them. Periodically test controls using a risk-based approach and a defined testing calendar and remediate all identified control gaps through documented corrective action plans. Utilize automation and AI to increase efficiency and consistency, including generating process flows, designing and automating controls, testing and assessing control effectiveness. Ensure detailed procedures with key controls are documented and executed across Tidal.
• Technology and Cybersecurity Risk Management: Build and manage a Technology and Cybersecurity Risk Management program to provide independent risk oversight and constructive challenge of technology governance, cybersecurity, cloud and infrastructure, identity and access management, data, software development and change, artificial intelligence, and system resilience. Collaborate with the Technology & Operations department to increase the use of automation and AI to enhance real-time risk sensing and anomaly detection to identify emerging technology and cybersecurity threats.
• Third-Party Risk Management (TPRM): Build and manage a comprehensive TPRM that identifies, assesses, and mitigates risks posed by external third parties, including vendors, service providers, counterparties, and brokers. Oversee risk across the third-party lifecycle, including due diligence, risk tiering, contracting, ongoing monitoring, issue and control management, and exit planning. Assess operational, technology, cybersecurity, financial, regulatory, reputational, and concentration risks for third parties and confirm that contingency plans address material dependencies.
• Change Management Risk: Build and manage a Change Management Risk program to identify and assess risks associated with material organizational or process changes, new products, systems, and vendors. Confirm that risk mitigation measures and controls have been implemented and tested, issues have been resolved, and operational readiness activities have been completed before implementation. Update affected RCSAs when the risk or control environment changes.
• Issue & Incident Management and Business Continuity Plan (BCP): Support our Issue & Incident Management and BCP programs in a variety of ways including by identifying control breakdowns and supporting the design of enhanced controls and related processes to prevent the recurrence of issues and incidents.
• Risk Intelligence: Support the design and implementation of our Risk Intelligence data and reporting using automation, AI, and visualization tools to efficiently deliver data-driven risk insights, forward-looking predictive analytics, and forecasts that drive proactive, risk-informed decisions.
• Cross-Functional Leadership: Serve as a trusted partner within Tidal’s growth-oriented, entrepreneurial culture by providing balanced challenge, thoughtful insights, and practical recommendations.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Electrical/Computer Engineering, Computer Science, Risk Management or a related technical discipline.
• 5+ years of relevant experience in operational risk, technology and cybersecurity risk, third-party risk, IT audit, or internal controls within asset or investment management, ETF platforms, or broader financial services.
• Relevant professional certifications such as CISA, CRISC, CISSP, or CIA.
• Working knowledge of operational and technology risk frameworks and standards, such as COSO, COBIT, NIST, or ISO.
• Experience designing, implementing, or leading an RCSA program, including methodology development, risk and control taxonomies, inherent and residual risk scoring, assessment scoping, evidence review, control evaluation, and governance reporting.
• Experience using automation, AI, data analytics, and data visualization to improve risk identification, assessment, monitoring, RCSA execution, workflow management, dashboards, and reporting.
• Exceptional written, verbal, facilitation, and interpersonal skills, with the ability to translate complex operational and technology risks into clear decisions, provide credible challenge, and influence stakeholders in a fast-paced, high-growth environment.
  We are prioritizing candidates who are located within proximity to Chicago, IL; Milwaukee, WI; New York City, NY; and West Palm Beach, FL.

The pay range for this role is:

95,000 - 140,000 USD per year (Remote (United States))