Technology Risk & Cyber Governance Lead

Precision Labs; United States; Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Healthcare Insurance (US)

Equity opportunity

Maternity & Paternity leave

WeWork All Access Membership

WFH Yearly Stipend

L&D Yearly Stipend

Job summary

zerohash is seeking a Technology & Cyber Risk Manager to serve as the independent voice on whether our infrastructure is as secure as claimed. You’ll be the second-line function reporting to the Head of Risk, building risk views in dollars and likelihoods using FAIR and shaping governance for AI and vendor diligence.

You’ll own the risk framework, keep the risk register live, challenge first-line work, and partner with Engineering to cover infrastructure, applications and AI systems, influencing

Qualifications

• 5+ years in technology risk, cyber risk or information security risk, including 2+ years in a dedicated second-line role at a bank, insurer or regulated fintech, in a function separate from the security team you reviewed.
• A story of escalating a finding over real objections and getting the control implemented, not just documenting the gap.
• Experience reading first-line security work and forming an independent opinion that differs from the first line's.
• Quantitative risk modeling experience; FAIR is ideal.
• Exposure to GSIB-caliber third-party technology assessments, as the assessor or as the vendor being assessed.
• Clear writing for boards and executives; reporting to Risk Committee and board is a core deliverable.

Responsibilities

• Build and own the cyber risk framework: methodology, risk appetite metrics and a FAIR scenario library.
• Produce independent risk views for senior leadership and the board.
• Keep the technology and cyber risk register live and current.
• Review and challenge first-line security work and escalate findings until fixed.
• Partner with Engineering and Security to identify risk across infrastructure, applications and AI systems.
• Build the AI governance program: use case registry, risk classification, and oversight of AI systems touching data.
• Provide independent technical risk assessments of custody-critical and security-critical vendors for the broader vendor risk program.
• Support regulatory and counterparty risk assessments as the second-line technology risk owner.
• Track emerging risks, including AI, model risk and cryptographic risk.

Skills

Technology risk

Cyber risk

Information security risk

Quantitative risk modeling

FAIR framework

Tools

Penetration testing reviews

Vulnerability metrics

Control assessments

Job description

zerohash is seeking a Technology & Cyber Risk Manager to serve as the independent voice on whether our infrastructure is as secure as claimed. You’ll be the second-line function reporting to the Head of Risk, building risk views in dollars and likelihoods using FAIR and shaping governance for AI and vendor diligence.

You’ll own the risk framework, keep the risk register live, challenge first-line work, and partner with Engineering to cover infrastructure, applications and AI systems, influencing