Senior Software Engineer

Link Canada : 2SLGBTQ+ Insurance Network; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Short-term Disability

Long-term Disability

Life Insurance

AD&D Insurance

Flexible Spending Accounts

Health Reimbursement Account

Employee Assistance Program

401(k) Plan with Company Match

Paid Time Off

Tuition Reimbursement

Paid Parental Leave

Job summary

Link Canada : 2SLGBTQ+ Insurance Network is seeking an experienced technology risk leader to identify, assess, and monitor enterprise risks, ensuring alignment with risk appetite. You will lead RCSAs, maintain the technology risk register, and evaluate critical vendors and AI use cases.

The role requires deep expertise in NIST CSF, COBIT, COSO ERM, and regulatory controls, with strong documentation and GRC tooling experience.

Qualifications

• Over 10 years of experience in technology risk, audit, or cyber GRC.
• Proficiency in frameworks like NIST and COBIT.
• Strong documentation skills.
• Experience with GRC tools or certifications such as CRISC or CISA.

Responsibilities

• Identify, assess, and monitor technology risks across the enterprise.
• Lead RCSAs (Risk & Control Self-Assessments).
• Manage the technology risk register.
• Evaluate critical vendors and AI use cases.

Skills

Technology Risk Management

RCSA (Risk & Control Self-Assessments)

Vendor Risk Management

GRC Tools

NIST CSF

COSO ERM

COBIT

SOC 2 Analysis

Regulatory Compliance

AI Risk Governance

KRI/KPI Definition

Control Design

Cyber GRC

Audit and Compliance

Risk Register Maintenance

Stakeholder Management

Tools

GRC Tools

Job description

The role focuses on identifying, assessing, and monitoring technology risks across the enterprise to ensure alignment with risk appetite. Key duties include leading RCSAs, managing the technology risk register, and evaluating critical vendors and AI use cases.

Requirements

Candidates need over 10 years of experience in technology risk, audit, or cyber GRC, with proficiency in frameworks like NIST and COBIT. Strong documentation skills and experience with GRC tools or professional certifications like CRISC or CISA are highly valued.

Key Skills

Technology Risk Management, Risk and Control Self-Assessments (RCSA), Vendor Risk Management, GRC Tools, NIST CSF, COSO ERM, COBIT, SOC 2 Analysis, Regulatory Compliance, AI Risk Governance, KRI/KPI Definition, Control Design, Cyber GRC, Audit and Compliance, Risk Register Maintenance, Stakeholder Management

Benefits

Comprehensive Health Insurance, Dental Insurance, Vision Insurance, Short-term Disability Insurance, Long-term Disability Insurance, Life Insurance, Accidental Death & Dismemberment Insurance, Flexible Spending Accounts, Health Reimbursement Account, Employee Assistance Program, 401(k) Plan with Company Match, Paid Time Off, Tuition Reimbursement, Paid Parental Leave