Cyber Risk Director: AI & Tech Resilience

TIAA; Dallas (TX); On-site; USD 153,000 - 207,000; Full time

Job summary

TIAA seeks a Technology Risk Officer to lead Cybersecurity risk governance for AI frontier initiatives. You will own 2LoD input, drive risk assessments, controls, and escalation across the Cyber response program, while partnering with risk, compliance, legal, and audit.

This role focuses on expanding cyber KRIs/KCIs, ensuring secure baseline architectures, and aligning with enterprise resilience goals, with growth into AI/quantum risk areas.

Qualifications

• 5+ years of experience in Cybersecurity, IT Risk Management, IT Audit, and/or IT Compliance.
• 1+ years of experience with AI engineering, development, support or compliance.
• Certifications: CISA, CISSP, CRISC and/or CISM.

Responsibilities

• Lead the delivery of the Cyber Risk Management Framework and ensure integration with enterprise risk management.
• Monitor changes in the technology landscape and update the Risk Framework accordingly.
• Oversee 2nd line oversight of the Cyber response to AI Frontier models Program, including risk assessment and reporting.
• Coordinate with Risk and Compliance to ensure aligned touch points across the program.
• Expand Cyber KRIs and KCIs focusing on AI capabilities and associated threats.
• Coordinate evolution of Technology Risk architecture for secure baselines and testing capabilities.
• Manage escalations and cross-functional collaboration across business, technology, legal, compliance, cybersecurity, and audit.

Skills

Cybersecurity

IT Risk Management

IT Audit

IT Compliance

AI engineering

AI development

AI support

Education

University degree preferred

Job description

TIAA seeks a Technology Risk Officer to lead Cybersecurity risk governance for AI frontier initiatives. You will own 2LoD input, drive risk assessments, controls, and escalation across the Cyber response program, while partnering with risk, compliance, legal, and audit.

This role focuses on expanding cyber KRIs/KCIs, ensuring secure baseline architectures, and aligning with enterprise resilience goals, with growth into AI/quantum risk areas.