Principal Technology Risk, Fidelity Institutional

Fidelity Investments Inc.; Merrimack (NH); On-site; USD 120,000 - 160,000; Full time

Job summary

Fidelity Investments Inc. is seeking a Technology Risk professional to join the FI ETRA team.

You will evaluate risks across technology, financial, reputational, and regulatory domains, and support remediation and governance activities with Technology, Operations and Risk partners. You will lead risk assessments, monitor controls, and engage with senior leadership, Internal Audit and External Audit to ensure comprehensive risk management for large-scale financial services initiatives.

Qualifications

• Strong analytical and problem solving skills with the ability to assess risk and influence decisions.
• Experience leading risk assessments, control assessments, IT audits or implementing cybersecurity controls.
• Ability to communicate complex technology risk to senior leadership and executive audiences.

Responsibilities

• Evaluate risks across technology, financial, reputational and regulatory areas.
• Lead risk assessments and control assessments for large-scale initiatives.
• Monitor technology controls and oversee remediation plans with cross-functional teams.
• Provide risk consultation to technology leadership and risk partners.

Skills

Analytical thinking

Cloud native architectures

CI/CD pipelines

Application security

Communication to leadership

AI/ML/RPA knowledge

6+ years IT risk/cyber security

Education

Bachelor's degree (CS/IT/Cybersecurity/Eng)

Tools

Cloud certifications (CCSP/CCSK/AWS)

Job description

Job Description:

Note: Fidelity will not provide immigration sponsorship for this position.

The Role

The Technology Risk team for Fidelity Institutional (FI) within the Enterprise Technology Risk and Analytics (ETRA) group is seeking a passionate, driven, and experienced professional to join the team. You will work with a team leaders focusing on evaluating risks (technology, financial, reputational, and regulatory), enhancing and managing the core program activities, and working with Technology, Operations and Risk teams to holistically manage the risk portfolio. You will work closely with the various Technology Risk Centers of Excellence (CoEs) including performing proactive risk and control assessments, monitoring technology controls, documenting and overseeing remediation plans. You will also provide appropriate risk and controls consulting on key FI initiatives and Emerging Technologies activities, and engage with FI and Senior leadership, Internal Audit and External Audit teams

The Expertise and Skills you Bring

• Strong analytical, problem solving and critical thinking skillset with the ability to assess risk, challenge assumptions and influence decision making across partners and senior leadership
• Strong knowledge of cloud native architectures, container platforms, CI/CD Pipelines, application security and database management platforms.
• Experience leading Technology risk assessments, control assessments, IT Audits or implementing Cybersecurity controls for large scale financial service organizations.
• Proven ability to communicate complex technology, risk and operational risks to senior leadership and executive audiences.
• Knowledge of artificial intelligence, machine learning, LLM, data science, and Robotic Process Automation (RPA) tools.
• 6+ years’ experience in information technology risk, cyber security, controls, or audit roles.
• Bachelor’s Degree in computer science, information technology, cybersecurity, engineering or a related field of study preferred.
• Professional technology risk certifications (CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred.
• Lead in-depth risk assessments of strategic initiatives cloud modernization program, emerging technology implementation and key business capabilities.
• Provide risk consultation to technology leadership and risk partners
• Identify systematic risk themes and emerging threats and communicate insights into technology and business leadership
• Cross Functional Partnership with legal, risk, compliance and enterprise technology teams to provide tactical and strategic guidance on risk initiatives and incidents.
• Perform in-depth data analysis and apply innovative automated tools to provide management with proper context of potential exposure and loss of business due to control weaknesses.
• Liaison with Internal and External audit teams, tracking internal and external audit findings, perform issues follow-up, consulting and action plans with owners and issue resolution.

Fidelity’s Onsite Working Model
Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

Certifications:

Category:

Information Technology

Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.