Technology Risk & Controls Leader — Hybrid

IDBNY; New York (NY); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Medical insurance

Dental insurance

Vision plan

Retirement plan

Paid time off

Parental leave

Tuition reimbursement

Job summary

IDB New York (IDBNY) is seeking a Technology Governance and Controls Specialist to serve as a 1LoD control authority within Technology. You will own, execute, and continually improve the bank’s technology and cybersecurity governance framework while partnering with technology teams to identify, assess, and mitigate risks across infrastructure, cloud services, and data platforms.

The role drives control culture through risk assessments, control testing, issue remediation, and regulatory

Qualifications

• Experience in technology risk, information security, IT governance, or internal controls.
• Experience with cloud platforms, databases, networks, and security technologies.
• Familiarity with NIST-CSF, NYDFS Part 500, GLBA, and related frameworks.

Responsibilities

• Identify, assess, monitor, and mitigate technology and cybersecurity risks.
• Own and enhance the Technology and Cybersecurity Risk and Control Framework.
• Conduct RCSA activities including control mapping, testing, and remediation tracking.
• Embed controls within processes, systems, and projects across the organization.
• Lead risk and control reporting to management and governance committees.

Skills

1LoD technology risk

Governance

Risk assessment

Regulatory compliance

Stakeholder influence

Education

Bachelor’s degree in CS/IS/Cybersecurity

Tools

Archer or equivalent GRC

Job description

IDB New York (IDBNY) is seeking a Technology Governance and Controls Specialist to serve as a 1LoD control authority within Technology. You will own, execute, and continually improve the bank’s technology and cybersecurity governance framework while partnering with technology teams to identify, assess, and mitigate risks across infrastructure, cloud services, and data platforms.

The role drives control culture through risk assessments, control testing, issue remediation, and regulatory