Cyber & AI Risk Director — 2nd Line Oversight

TIAA; Woodbridge Township (NJ); Sur place; USD 153 000 - 207 000; Plein temps

Résumé du poste

Technology Risk Officer at TIAA will drive cyber risk management for AI frontier programs and ensure robust controls across the lifecycle. You will partner with risk, compliance, legal, and technology teams to translate strategy into measurable risk metrics and secure operations.

The role emphasizes 2LoD challenge, policy updates, and KRIs/KCIs expansion to address evolving AI threats and cyber resilience across the enterprise.

Qualifications

• 5+ years of experience in Cybersecurity, IT Risk Management, IT Audit, and/or IT Compliance.
• 1+ years of experience with AI engineering, development, support or compliance.
• Professional Certifications: CISA, CISSP, CRISC and/or CISM.

Responsabilités

• Lead the delivery of the Cyber Risk Management Framework, driving the development, maintenance, and rollout of updates to the Cybersecurity policies, standards, and risk-tiering methodology for approval, and ensuring integration with enterprise risk management, and compliance partners
• Monitor changes in the technology landscape to make recommendations on changes to the Risk Framework and follow up with Control Partners to ensure that the controls are efficient and effective to manage the evolving risks
• Manage the 2nd line oversight of the Cyber response to AI Frontier models Program, including risk assessment, control development, prioritization based on risk and reporting on progress including any need to upscale delays or other impediments to successful completion of the program.
• Partner across the Risk and Compliance to ensure that appropriate touch points are in synch and appropriately aligned
• Lead the expansion of Cyber KRIs and KCIs, with a focus on the impacts of expanded AI capabilities, not only to support TIAA’s ability to defend itself, but also to monitor the growing threats from the availability of AI to malicious actors, and the ability for internally used AI Agents to go rouge and cause damage from within the firm.
• Coordinate with the evolution of the Technology Risk architecture and Infrastructure to ensure a more secure at baseline and improved testing capabilities not only for functionality, but resiliency and security.
• Manage escalations and cross-functional collaboration across business, technology, legal, compliance, cybersecurity, and audit, resolving issues identified through activities with the Cybersecurity strategic programs.

Connaissances

Cybersecurity expertise

IT Risk Management

IT Audit

IT Compliance

AI engineering awareness

Formation

University degree preferred

Description du poste

Technology Risk Officer at TIAA will drive cyber risk management for AI frontier programs and ensure robust controls across the lifecycle. You will partner with risk, compliance, legal, and technology teams to translate strategy into measurable risk metrics and secure operations.

The role emphasizes 2LoD challenge, policy updates, and KRIs/KCIs expansion to address evolving AI threats and cyber resilience across the enterprise.