Cyber/AI Risk Director - 2LoD & Resilience Lead

TIAA; Charlotte (NC); On-site; USD 153,000 - 207,000; Full time

Job summary

TIAA in Charlotte, NC is seeking a Technology Risk Officer – Cyber / AI to provide 2LoD input and challenge on cybersecurity strategic projects, focusing on the AI Frontier models program. You will manage daily controls and ensure risks are identified and addressed.

The role collaborates with risk, compliance, legal, and audit teams to align deliverables, enhance cyber resilience, and evolve the risk architecture as AI and other technologies advance.

Qualifications

• 5+ years of experience in Cybersecurity, IT Risk Management, IT Audit, and/or IT Compliance.
• 1+ years of experience with AI engineering, development, support or compliance.
• Professional Certifications: CISA, CISSP, CRISC and/or CISM.

Responsibilities

• Lead the Cyber Risk Management Framework, updating policies and risk-tiering for approval and integration with enterprise risk management.
• Monitor changes in the technology landscape and adjust the Risk Framework; ensure controls are efficient and effective.
• Oversee 2nd line oversight of the Cyber response to AI Frontier models program and report progress.
• Coordinate with Risk and Compliance to align touchpoints and information flow.
• Expand Cyber KRIs and KCIs with focus on AI capabilities and threats, including rogue AI agents.
• Collaborate across business, technology, legal, compliance, cybersecurity, and audit to resolve issues.

Skills

5+ years of experience in Cybersec, IT

1+ years of AI engineering exposure

Education

University (Degree) Preferred

Job description

TIAA in Charlotte, NC is seeking a Technology Risk Officer – Cyber / AI to provide 2LoD input and challenge on cybersecurity strategic projects, focusing on the AI Frontier models program. You will manage daily controls and ensure risks are identified and addressed.

The role collaborates with risk, compliance, legal, and audit teams to align deliverables, enhance cyber resilience, and evolve the risk architecture as AI and other technologies advance.