Senior Technology Risk & Compliance Leader

Point72 Asset Management, L.P; New York, Northern (NY, KY); Hybrid; USD 175,000 - 275,000; Full time

Benefits offered by this job

Fully-paid health care benefits

Generous parental and family leave

Mental and physical wellness programs

Volunteer opportunities

Non-profit matching gifts

Support for employee-led affinity-gou

Job summary

Point72’s Technology team is advancing the firm’s IT infrastructure, cloud architectures, and AI solutions, while applying enterprise agile methodologies. As part of the team, you’ll help govern information security, manage regulatory examinations, and drive risk mitigation across a complex, global environment.

This role emphasizes policy development, privacy compliance, and clear risk reporting to management.

Qualifications

• 8–10 years of experience in information security governance, risk, and compliance.
• Bachelor’s degree in information security, information systems, information technology, or another relevant discipline.
• Extensive experience managing regulatory examinations and third‑party evaluations.
• Hands‑on experience with vendor assessment tools, such as SIG, OneTrust, and KY3P.
• Proven track record writing and implementing information security policies and standards.
• In‑depth knowledge of global data privacy laws and regulations, including the California Consumer Privacy Act and General Data Protection Regulation.
• Experience managing technology risks in a complex business environment.
• Exceptional written and verbal communication skills, with the ability to present risk concepts clearly to management and cross‑functional stakeholders.
• Commitment to the highest ethical standards.

Responsibilities

• Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives
• Lead independent assessments of the information security program, including regulatory examinations and third‑party evaluations
• Identify technology risks across a complex business environment and drive mitigation aligned with our firm’s standards and control expectations
• Investigate data privacy inquiries and privacy‑related events, assess business impact, and coordinate timely response activities
• Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans
• Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations
• Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions
• Maintain accurate risk, policy, privacy, and assessment documentation to support transparency, accountability, and examination readiness
• Strengthen governance processes by identifying recurring issues and recommending improvements that reduce risk and improve readiness

Skills

Info security governance

Regulatory assessment experience

Vendor risk management

Policy development

Strong communication

Ethical standards

Education

Bachelor's degree in information security

Tools

SIG

OneTrust

KY3P

Job description

Point72’s Technology team is advancing the firm’s IT infrastructure, cloud architectures, and AI solutions, while applying enterprise agile methodologies. As part of the team, you’ll help govern information security, manage regulatory examinations, and drive risk mitigation across a complex, global environment.

This role emphasizes policy development, privacy compliance, and clear risk reporting to management.