Lead Tech Risk Controls Testing & Strategy

Fidelity Investments; Durham (NC); On-site; USD 145,000 - 190,000; Full time

Job summary

Fidelity Investments in Durham, NC is seeking a Principal Technology Risk Analyst to lead complex risk assessments, influence senior stakeholders, and advance the firm's enterprise technology risk program.

You will partner across technology, risk, compliance, and audit to design controls, scale risk guidance, and drive remediation of critical gaps while shaping risk culture and capabilities.

This role offers strategic impact and the opportunity to mentor teams in a dynamic, regulated environment.

Qualifications

• Bachelor's degree or higher in computer science, information systems, or a related field.
• 8+ years of technology risk, IT, cybersecurity, cloud, analytics, audit, or related risk management experience.
• Experience leading complex control assessments and evaluating control maturity across diverse tech environments.
• Knowledge of frameworks such as NIST, COBIT, AICPA Trust Services Criteria, ISO 27001, HITRUST.
• Familiarity with cloud security models and GRC platforms like Archer.

Responsibilities

• Lead highly complex technology risk and controls assessments for audits, regs, and enterprise risk management.
• Evaluate control design and operating effectiveness across cloud and vendor-hosted environments.
• Partner with senior leaders to influence risk decisions and drive remediation of control gaps.
• Apply advanced risk expertise to resolve complex challenges and improve testing methodologies.
• Drive enhancements to risk assessment practices, automation, and reporting processes.
• Provide leadership and coaching across workstreams to develop team capabilities.

Skills

Technology risk

Auditing

Cloud security

Leadership

Risk frameworks

Education

Bachelor's degree in CS/IT

Master's degree preferred

Tools

Archer

AWS

Azure

Job description

Fidelity Investments in Durham, NC is seeking a Principal Technology Risk Analyst to lead complex risk assessments, influence senior stakeholders, and advance the firm's enterprise technology risk program.

You will partner across technology, risk, compliance, and audit to design controls, scale risk guidance, and drive remediation of critical gaps while shaping risk culture and capabilities.

This role offers strategic impact and the opportunity to mentor teams in a dynamic, regulated environment.