Senior Cyber & Technology Risk Leader

Brown Brothers Harriman & Co.; Boston, Northern (MA, KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Brown Brothers Harriman (BBH) is seeking a Senior Risk Manager to lead the Cyber & Technology Risk Management function as a trusted second-line advisor. The role focuses on identifying, assessing, and managing cyber and technology risks across the firm, collaborating with technology, security, and operations teams.

The successful candidate will bring 10+ years of cyber/technology risk experience, a strong grasp of regulatory requirements, and the ability to communicate complex risk concepts to

Qualifications

• Bachelor’s degree, equivalent work experience, specialized training in information technology, cybersecurity, risk management, audit, or related discipline.
• 10+ years of experience in cyber risk, technology risk, information security, IT audit, operational risk, third-party risk, or a related control function.
• Demonstrated experience assessing cyber risk programs, cybersecurity controls, and information security governance frameworks within a regulated financial institution or similarly regulated environment.
• Ability to analyze complex risk issues, balance business objectives with control expectations, and communicate practical recommendations to both technical and non-technical audiences.
• Strong understanding of cyber and technology risk concepts, control assessment, issue management, remediation tracking, risk acceptance, and risk reporting practices.
• Strong knowledge of cybersecurity regulatory requirements and industry frameworks, including NYDFS Part 500, NIST Cybersecurity Framework, ISO 27001, and other applicable cybersecurity or operational resilience standards.
• Familiarity with DORA, global operational resilience requirements, and other emerging cyber regulatory frameworks.
• Working knowledge of technology environments, including networks, operating platforms, cloud services, application security, and third-party hosted solutions.
• Certifications such as CISSP, CISM, and/or CRISC are a plus.

Responsibilities

• Partner with technology, security, and operations teams to identify, assess, and manage cyber and technology risks.
• Provide independent second-line advisory and effective challenge, translating risk considerations into clear, practical guidance.
• Lead and/or support risk and control assessments, including cyber risk reviews, RCSAs, application risk assessments, external assurance reviews, and related governance activities.
• Evaluate control gaps, risk acceptances, exceptions, and remediation plans; assist stakeholders prioritize actions based on business impact, risk appetite, and regulatory expectations.
• Analyze new and emerging risks, including related regulatory requirements and supervisory guidance to identify risk implications and potential gaps; collaborate with control owners on control design, implementation, and measurement.
• Support the continued build-out of a new IT governance platform to improve integration, transparency, and execution across Cyber & Technology Risk Management programs.

Skills

Cyber risk management

Information security

Regulatory frameworks

Risk assessment

Education

Bachelor’s degree

IT/cybersecurity training

Tools

NIST CSF

ISO 27001

DORA

Job description

Brown Brothers Harriman (BBH) is seeking a Senior Risk Manager to lead the Cyber & Technology Risk Management function as a trusted second-line advisor. The role focuses on identifying, assessing, and managing cyber and technology risks across the firm, collaborating with technology, security, and operations teams.

The successful candidate will bring 10+ years of cyber/technology risk experience, a strong grasp of regulatory requirements, and the ability to communicate complex risk concepts to