Senior Manager Technology Risk

ameriprise; Minneapolis (MN); Hybrid; USD 122,000 - 168,000; Full time

Job summary

Ameriprise Financial in Minneapolis is seeking a Senior Manager, Technology Risk to lead technology and cyber risk oversight as part of the 2LOD. You will partner with Technology, Information Security, and business leaders to identify, assess, and mitigate risk while upholding enterprise risk standards.

The role emphasizes risk reporting, risk assessments, and governance across initiatives, with in-office collaboration most days and some flexibility to work from home.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 7-10+ years of technology risk, cyber risk, or related risk disciplines.
• Strong knowledge of IT operations, technology controls, cybersecurity practices.
• Familiarity with NIST, COBIT, ISO27000, FFIEC and related regulatory standards.
• Ability to independently assess risk and provide effective challenge.

Responsibilities

• Lead risk oversight activities for technology and cyber domains.
• Provide credible challenge to first-line risk management practices.
• Develop risk reporting, dashboards, and management information.
• Review risk events and ensure remediation actions are taken.
• Mentor junior team members and contribute to process improvements.

Job description

About Our Company

We're a diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. Our team of 22,000 people across 19 countries, serves more than 3.5 million individual, small business and institutional clients. We are a longstanding leader in financial planning and advice, a global asset manager and an insurer. Our unwavering focus on our clients and strong financial foundation connects each of our unique businesses - Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities. Here, we foster meaningful careers, invest in the future, and make a difference for clients, institutions and communities around the world.

Job Description

The Senior Manager, Technology Risk is a Second Line of Defense (2LOD) role reporting to the VP, Technology Risk Office. Responsible for leading technology and cyber risk oversight activities across assigned business areas, providing independent review and credible challenge of technology risk management practices, and supporting adherence to enterprise risk management standards. This role partners closely with Technology, Information Security, and business leaders to identify, assess, and mitigate risk while fostering a strong risk culture across the organization

Key Responsibilities

• Lead risk oversight activities for assigned technology and cyber domains.
• Provide credible challenge to first line risk management practices, ensuring alignment with enterprise standards.
• Identify emerging risk themes and escal...
• Support governance forums and risk committees through preparation of materials, risk reporting, and follow-up actions.
• Lead execution and review of Risk and Control Self-Assessments within assigned areas.
• Challenge risk and control assessments to ensure completeness and consistency.
• Support implementation and ongoing enhancement of ORM methodologies and standards.
• Review and challenge management responses to technology and cyber risk events.
• Ensure issues are appropriately documented, escalated, and remediated.
• Analyze trends and recommend proactive actions to reduce future risk exposure.
• Assess technology and business changes for potential risk impact.
• Partner with stakeholders to evaluate controls associated with significant initiatives and transformations.
• Support governance processes related to strategic technology change.
• Develop risk reporting, dashboards, and management information.
• Analyze risk trends and provide insights to support decision-making.
• Recommend improvements to risk management practices, reporting, and monitoring capabilities.
• Serve as a subject matter expert and trusted advisor to business and technology stakeholders.
• Mentor junior team members and provide guidance on risk methodologies and best practices.
• Contribute to team initiatives, process improvements, and strategic objectives.

Required Qualifications

• Bachelor's degree or equivalent experience required. Advanced degree preferred.
• 7-10+ years of experience in technology risk, cyber risk, operational risk, audit, information security, or related discipline.
• Strong knowledge of IT operational processes, technology controls, cybersecurity practices, and risk management frameworks.
• Working knowledge of NIST, COBIT, ISO27000, FFIEC, and related regulatory standards.
• Ability to independently assess risk exposures and provide effective challenge.
• Strong analytical and problem-solving skills.
• Ability to influence stakeholders across multiple levels of the organization.
• Strong written and verbal communication skills.
• Experience utilizing GRC/eGRC platforms and reporting tools.
• Ability to manage multiple priorities and work independently.

Preferred Qualifications

• CISA, CRISC, CISSP, Other relevant risk or security certifications

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders - clients, advisors, employees and shareholders. Our employees work in the office at least four (4) days per week, with flexibility to work from home one (1) day per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Visa Sponsorship

Applicants must have a valid work authorization that does not now, or in the future, require visa sponsorship for employment in the United States (e.g., H-1B, F-1 CPT, F-1 OPT, TN).

Base Pay Salary

The estimated base salary for this role is $122,400 - $168,300/ year. We have a pay-for-performance compensation philosophy. Your initial total compensation may vary based on job-related knowledge, skills, experience, and geographical work location. In addition, most of our roles are eligible for variabl