Senior Cyber & Tech Risk Leader | Hybrid 3 days in office

Brown Brothers Harriman; Jersey City (NJ); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Job summary

Brown Brothers Harriman (BBH) seeks a Senior Risk Manager to lead a team of cyber and technology risk professionals in identifying, assessing, and managing risks across the firm. You will partner with Systems/Technology, Compliance, Internal Audit, and business lines to promote sound governance and practical outcomes.

The role requires deep knowledge of information security, cyber resilience, regulatory frameworks, and risk reporting.

Qualifications

• Bachelor’s degree or equivalent in IT, cybersecurity, risk management, audit, or related discipline.
• 10+ years in cyber/technology risk, information security, IT audit, or related control function.
• Experience assessing cyber risk programs and security governance frameworks in regulated environments.
• Ability to translate risk into practical guidance for technical and non-technical audiences.

Responsibilities

• Partner with technology, security, and operations teams to identify, assess, and manage cyber and technology risks.
• Provide independent second-line advisory with clear, practical guidance.
• Lead or support risk and control assessments, including cyber risk reviews and external assurance.
• Evaluate control gaps, risk acceptance, exceptions, and remediation plans; set priorities by impact and regulatory expectations.
• Analyze emerging risks and regulatory guidance to identify gaps and inform control design and measurement.

Skills

Risk management

Cyber risk

Regulatory compliance

Information security

Risk assessment

Governance

Education

Bachelor’s degree or equivalent

Security/risk certifications (e.g., CISSP, CISM, CRISC)

Job description

Brown Brothers Harriman (BBH) seeks a Senior Risk Manager to lead a team of cyber and technology risk professionals in identifying, assessing, and managing risks across the firm. You will partner with Systems/Technology, Compliance, Internal Audit, and business lines to promote sound governance and practical outcomes.

The role requires deep knowledge of information security, cyber resilience, regulatory frameworks, and risk reporting.