Senior Tech Risk & GRC Lead - AI & Vendors

Link Canada : 2SLGBTQ+ Insurance Network; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Short-term Disability

Long-term Disability

Life Insurance

AD&D Insurance

Flexible Spending Accounts

Health Reimbursement Account

Employee Assistance Program

401(k) Plan with Company Match

Paid Time Off

Tuition Reimbursement

Paid Parental Leave

Job summary

Link Canada : 2SLGBTQ+ Insurance Network is seeking an experienced technology risk leader to identify, assess, and monitor enterprise risks, ensuring alignment with risk appetite. You will lead RCSAs, maintain the technology risk register, and evaluate critical vendors and AI use cases.

The role requires deep expertise in NIST CSF, COBIT, COSO ERM, and regulatory controls, with strong documentation and GRC tooling experience.

Qualifications

• Over 10 years of experience in technology risk, audit, or cyber GRC.
• Proficiency in frameworks like NIST and COBIT.
• Strong documentation skills.
• Experience with GRC tools or certifications such as CRISC or CISA.

Responsibilities

• Identify, assess, and monitor technology risks across the enterprise.
• Lead RCSAs (Risk & Control Self-Assessments).
• Manage the technology risk register.
• Evaluate critical vendors and AI use cases.

Skills

Technology Risk Management

RCSA (Risk & Control Self-Assessments)

Vendor Risk Management

GRC Tools

NIST CSF

COSO ERM

COBIT

SOC 2 Analysis

Regulatory Compliance

AI Risk Governance

KRI/KPI Definition

Control Design

Cyber GRC

Audit and Compliance

Risk Register Maintenance

Stakeholder Management

Tools

GRC Tools

Job description

Link Canada : 2SLGBTQ+ Insurance Network is seeking an experienced technology risk leader to identify, assess, and monitor enterprise risks, ensuring alignment with risk appetite. You will lead RCSAs, maintain the technology risk register, and evaluate critical vendors and AI use cases.

The role requires deep expertise in NIST CSF, COBIT, COSO ERM, and regulatory controls, with strong documentation and GRC tooling experience.