Technology Risk & Controls Leader — Hybrid

IDBNY; New York (NY); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Medical, dental, vision

Retirement plans

Paid time off

Hybrid schedule

Job summary

IDB NY seeks a Technology Governance and Controls Specialist to oversee the 1LoD risk and control framework across technology, data, and third parties in a hybrid NYC setting. You will drive risk assessments, control testing, and governance reporting with strong collaboration across tech, risk, compliance, and audit teams.

The role requires extensive experience in technology risk, cybersecurity controls, and regulatory readiness, with a focus on embedding controls into systems and projects while

Qualifications

• Experience in 1LoD technology risk and control functions across IT infrastructure, apps, cloud, data, and third parties.
• Familiarity with NIST-CSF, NYDFS Part 500, GLBA, and related regulatory frameworks.
• Experience coordinating RCSA programs, testing, and remediation governance.

Responsibilities

• Serve as 1LoD SME for technology risk and controls across infrastructure, cloud, apps, data, and vendors.
• Own and enhance the risk and control framework in alignment with regulations and business goals.
• Lead RCSA activities, control mapping, testing, issue remediation, and reporting.
• Coordinate with stakeholders to embed controls in processes and changes, and drive remediation.

Skills

1LoD risk expert

RCSA coordination

Regulatory readiness

GRC platform knowledge

Stakeholder influence

Risk and control testing

Control ownership

Governance reporting

Education

Bachelor's degree in CS/IS/cybersecurity

Tools

Archer

Job description

IDB NY seeks a Technology Governance and Controls Specialist to oversee the 1LoD risk and control framework across technology, data, and third parties in a hybrid NYC setting. You will drive risk assessments, control testing, and governance reporting with strong collaboration across tech, risk, compliance, and audit teams.

The role requires extensive experience in technology risk, cybersecurity controls, and regulatory readiness, with a focus on embedding controls into systems and projects while