Senior Tech Risk & Controls Leader

Fidelity Investments; Durham (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Fidelity Investments is seeking a Principal Technology Risk Analyst to strengthen technology controls and influence enterprise risk decisions at scale. You will lead large, complex risk assessments, advise senior leaders, and drive improvements across risk management practices.

The role requires deep expertise in technology risk, cybersecurity, and control frameworks, with a track record of delivering data-driven risk guidance and robust remediation strategies within a large organization.

Qualifications

• Bachelor's degree in computer science, technology, or related field (Master's degree preferred).
• 8+ years of experience in technology risk, IT, cybersecurity, cloud, analytics, or audit.
• Experience leading complex control assessments and evaluating control maturity across diverse environments.
• Knowledge of NIST, COBIT, AICPA Trust Services Criteria, ISO 27001, HITRUST, or similar.
• Certifications such as CISA, CISSP, CRISC, CISM preferred.

Responsibilities

• Leading highly complex technology risk and controls assessments supporting audit, regulatory, certification, and enterprise risk management objectives.
• Evaluating control design and operating effectiveness across complex, distributed, cloud, and vendor-hosted environments.
• Partnering with senior leaders across technology, risk, compliance, and audit to influence risk decisions and remediation of gaps.
• Applying advanced risk expertise, analytical thinking, and professional judgment to resolve complex technology risk challenges.
• Driving enhancements to testing methodologies, risk assessment practices, automation, and reporting processes.

Skills

Technology risk

Leadership

Risk assessment

Data-driven decisions

Education

Bachelor's degree in CS/Tech

Master's degree preferred

Tools

Archer

Job description

Fidelity Investments is seeking a Principal Technology Risk Analyst to strengthen technology controls and influence enterprise risk decisions at scale. You will lead large, complex risk assessments, advise senior leaders, and drive improvements across risk management practices.

The role requires deep expertise in technology risk, cybersecurity, and control frameworks, with a track record of delivering data-driven risk guidance and robust remediation strategies within a large organization.