Technology Risk & Governance Lead

IDBNY; New York; Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Medical & dental

Retirement plan

Parental leave

Tuition reimbursement

Job summary

IDB Bank in New York seeks a Technology Governance and Controls Specialist to serve as a 1LoD control function within Technology. You will own and enhance the technology and cybersecurity risk and control framework, partnering with infrastructure, cybersecurity, data, and business teams to identify, assess, mitigate, and monitor risks while ensuring regulatory compliance.

The role requires 10+ years in technology risk or related fields, a technical degree, and relevant certifications.

Qualifications

• 10+ years of experience in technology risk, information security, or related first-line roles.
• Bachelor's degree in computer science, information systems, cybersecurity, or related field.
• Strong understanding of cloud platforms, databases, networks, and security tech.
• Experience with NIST-CSF, NYDFS Part 500, GLBA, and related controls.

Responsibilities

• Identify, assess, monitor, and mitigate technology and cybersecurity risks.
• Develop and maintain risk and control frameworks and governance documentation.
• Coordinate RCSA activities, testing, remediation, and reporting.
• Collaborate with technology, cybersecurity, risk, and audit teams.
• Prepare risk and control metrics for management and boards.
• Support internal and external audits and regulatory examinations.

Skills

Technology risk

Information security

IT governance

Regulatory frameworks

RCSA programs

GRC platforms Archer

Stakeholder management

Analytical skills

Documentation and reporting

Education

Bachelor's degree in computer science or related field

Tools

Archer

Job description

IDB Bank in New York seeks a Technology Governance and Controls Specialist to serve as a 1LoD control function within Technology. You will own and enhance the technology and cybersecurity risk and control framework, partnering with infrastructure, cybersecurity, data, and business teams to identify, assess, mitigate, and monitor risks while ensuring regulatory compliance.

The role requires 10+ years in technology risk or related fields, a technical degree, and relevant certifications.