Senior Tech Risk & Controls Testing Lead

Fidelity Investments; North Carolina; On-site; USD 120,000 - 190,000; Full time

Job summary

Fidelity Investments seeks a Principal Technology Risk Analyst to strengthen technology controls and guide risk outcomes at enterprise scale. You will lead comprehensive risk assessments, evaluate control design across cloud and vendor environments, and partner with technology, risk, compliance, and audit leaders to remediate gaps.

You bring extensive experience in technology risk, plus knowledge of NIST/ISO frameworks and cloud security.

Qualifications

• Bachelor’s degree in computer science, technology, or related field; Master’s preferred.
• 8+ years in technology risk, IT, cybersecurity, cloud, analytics, or related risk roles.
• Experience leading complex control assessments and evaluating control maturity.
• Knowledge of NIST, COBIT, AICPA Trust Services Criteria, ISO 27001, HITRUST.
• Familiarity with AWS/Azure and GRC platforms such as Archer.
• Professional certifications such as CISA, CISSP, CRISC, CISM preferred.

Responsibilities

• Lead highly complex technology risk and controls assessments for audit, regulatory, and enterprise risk.
• Evaluate control design and operating effectiveness across cloud, on‑prem, and vendor environments.
• Influence risk decisions with senior leaders; drive remediation of control gaps.
• Advance testing methodologies, risk assessments, automation, and reporting.
• Provide leadership and strategic direction across workstreams; build team capabilities.

Skills

Technology risk experience

Executive stakeholder communication

Auditing and control assessments

Risk frameworks knowledge

Analytical decision making

Education

Bachelor’s degree in computer science or related field

Master’s degree preferred

Tools

Archer

Job description

Fidelity Investments seeks a Principal Technology Risk Analyst to strengthen technology controls and guide risk outcomes at enterprise scale. You will lead comprehensive risk assessments, evaluate control design across cloud and vendor environments, and partner with technology, risk, compliance, and audit leaders to remediate gaps.

You bring extensive experience in technology risk, plus knowledge of NIST/ISO frameworks and cloud security.