Senior Lead Control Management Officer – Cloud Platform

Jobtailor

Arizona

On-site

USD 120,000 - 150,000

Full time

3 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor in Arizona is seeking a senior risk and controls leader to oversee enterprise infrastructure and cloud platform risk. You will design, implement, and monitor control frameworks, embed automated controls in CI/CD and Infrastructure-as-Code, and drive continuous compliance throughout the development lifecycle.

You will partner with Infrastructure Engineering, Cloud Platform Engineering, Information Security, Audit, and Compliance teams to deliver risk insights, KPI dashboards, and

Qualifications

7+ years of Risk Management or Financial Services experience.
7+ years in Control Management, Technology Risk, Information Security, or Audit.
Experience with Cloud Security, IaC, DevSecOps, and SRE practices.
Certifications such as CRISC, CISA, CISSP, CCSP, AWS/Azure/GCP, CGRC, or ITIL preferred.

Responsibilities

Lead risk identification, control design, and issue management for infrastructure and cloud platforms.
Develop and maintain control-as-code frameworks and automated evidence collection.
Provide governance reporting, regulatory engagement, and executive risk dashboards.
Mentor control officers and collaborate with audit, security, and platform teams.

Skills

Risk Management

Control Management

Cloud Security

Control Automation

Infrastructure-as-Code

DevSecOps

Site Reliability Engineering

Cloud Migration

Automation Strategy

Tools

CI/CD

Cloud Platforms

Virtualization

Container Platforms

Automated Controls

Job description

Lead Technology Controls engagement with the Cloud Platform organization
Provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives
Partner with Infrastructure Engineering, Cloud Platform Engineering, Information Security, Technology Risk, Audit, and Control Management teams
Perform risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and automation strategy advancement
Advise senior technology and control management leaders on risk mitigation strategies for complex infrastructure and cloud risks
Design, implement, and continuously improve control frameworks for infrastructure, cloud platforms, storage, compute, network, database, middleware, platform engineering, and Control-as-Code
Monitor, measure, evaluate, and report control and risk mitigation effectiveness
Lead audit, regulatory examination, horizontal review, and independent testing assessment and remediation activities
Identify emerging technology risks related to cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization
Support infrastructure transformation programs and cloud migration initiatives as a key control partner
Lead risk and control governance activities, including executive reporting, risk committee materials, and regulatory updates
Mentor and guide control officers and virtual teams
Develop risk and control frameworks for enterprise infrastructure services
Assess hybrid cloud, platform engineering, and infrastructure modernization risks
Evaluate controls across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services
Identify control gaps and develop sustainable remediation strategies with technology leaders
Embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes
Drive continuous compliance monitoring and automated evidence collection
Establish governance standards for automated preventive, detective, and corrective controls
Reduce manual control execution and testing through automation
Partner with Audit, Compliance, Independent Risk Management, and regulators during reviews and examinations
Coordinate issue management, root-cause analysis, and corrective action plans
Analyze KRI, issue, control testing, and operational loss data for systemic risk trends
Lead control health reporting and executive risk dashboards
Support risk appetite monitoring and governance forums
Present findings and recommendations to senior technology executives and control committees
Lead control management for major infrastructure and cloud transformation programs
Evaluate modernization initiatives through a risk and controls lens
Integrate governance, resiliency, security, and compliance requirements into engineering processes
Drive scalable control solutions that enable innovation while maintaining risk management

Requirements

7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through work experience, training, military experience, or education
7+ years of Control Management, Technology Risk, Information Security, or Audit experience
5+ years supporting large-scale technology organizations
Deep understanding of Cloud Security, Platform Engineering, Infrastructure-as-Code, DevSecOps, Site Reliability Engineering (SRE), Control Automation, and Continuous Compliance Monitoring
Experience implementing Control-as-Code frameworks
Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies
Experience supporting large-scale infrastructure modernization, cloud migration, or digital transformation programs
Relevant certifications such as CRISC, CISA, CISSP, CCSP, AWS/Azure/GCP Cloud Certifications, CGRC, or ITIL
Visa sponsorship is not available for this position

Core Competencies

Demonstrates expertise in Risk Management and Control Management within large-scale technology organizations, with a strong focus on Cloud Security, Infrastructure-as-Code, and Control Automation. Proven ability to design and implement effective control frameworks while ensuring compliance with regulatory standards.

Highest-signal resume keywords