Hybrid: Technology & Information Security Risk Specialist

IDBNY; New York; Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Medical coverage

Dental & vision

Job summary

IDBNY in the United States is seeking a Technology and Information Security Risk Specialist to provide independent Second Line oversight of technology infrastructure, information security, and cyber risk programs. The role evaluates risk identification, assessment, escalation, reporting, and remediation in a pragmatic manner.

The position strengthens the Bank’s risk posture by supporting risk assessments, control reviews, and connecting technology risk themes to ERM processes, including ICAAP,

Qualifications

• 10+ years in technology infrastructure, information security, cyber risk, IT controls or related oversight functions.
• Preferably within a regulated financial institution.
• Bachelor’s degree in a related technical or risk discipline.

Responsibilities

• Provide independent Second Line oversight of technology infrastructure, information security, and cyber risk programs.
• Lead risk assessments, control testing, issues, remediation plans, KRIs/KPIs, and governance routines.
• Develop and enhance the Second Line framework and connect risk themes to ERM processes.
• Identify and report risks in projects, new activities, vendor relationships, and emerging technologies.
• Prepare materials for management, committees, and regulators.
• Coordinate with audit, regulators, and senior stakeholders while maintaining independence.
• Produce clear, defensible work linking facts, risks, controls, dependencies, and conclusions.

Skills

Technology risk

Information security

Cyber risk

GRC tools

Communication

Executive reporting

Education

Bachelor's degree

Tools

GRC tools

Job description

IDBNY in the United States is seeking a Technology and Information Security Risk Specialist to provide independent Second Line oversight of technology infrastructure, information security, and cyber risk programs. The role evaluates risk identification, assessment, escalation, reporting, and remediation in a pragmatic manner.

The position strengthens the Bank’s risk posture by supporting risk assessments, control reviews, and connecting technology risk themes to ERM processes, including ICAAP,