Technology Risk Management Specialist

Point72; New York, Stamford (NY, CT); On-site; USD 175,000 - 275,000; Full time

Benefits offered by this job

Health benefits

Parental leave

Wellness programs

Volunteer opportunities

Matching gifts

Affinity groups

Tuition assistance

401(k) employer match

Job summary

Point72 is seeking a Senior Information Security Governance, Risk and Compliance leader in New York to shape policy, manage regulatory examinations, and drive risk remediation across a global financial services firm. You will partner with technology, legal, compliance and business stakeholders to translate findings into practical remediation plans and to strengthen governance processes.

The role demands extensive experience, excellent written and verbal communication, and a commitment to the

Qualifications

• Bachelor's degree in information security, information systems, or related discipline.
• Experience managing regulatory examinations and third-party evaluations.
• Proven ability to write and implement information security policies and standards.
• Knowledge of global data privacy laws (e.g., CCPA, GDPR).
• Strong written and verbal communication with cross-functional stakeholders.

Responsibilities

• Develop and maintain information security policy and standards library aligned to priorities.
• Lead independent assessments of the information security program and third-party evaluations.
• Identify technology risks and drive mitigation across the business.
• Coordinate data privacy inquiries and respond to privacy events.
• Translate risk findings into practical remediation plans with stakeholders.
• Advise on policy interpretation and evidence expectations for exams.
• Prepare clear reports on activity, risks, remediation and decisions.
• Maintain governance documentation to support examination readiness.
• Strengthen governance by identifying recurring issues and driving improvements.

Skills

Information security governance

Regulatory examinations

Policy writing

Communication

Education

Bachelor's degree in information security or related

Tools

SIG

OneTrust

KY3P

Job description

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business.

What you’ll do

• Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives
• Lead independent assessments of the information security program, including regulatory examinations and third-party evaluations
• Identify technology risks across a complex business environment and drive mitigation aligned with our firm’s standards and control expectations
• Investigate data privacy inquiries and privacy-related events, assess business impact, and coordinate timely response activities
• Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans
• Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations
• Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions
• Maintain accurate risk, policy, privacy, and assessment documentation to support transparency, accountability, and examination readiness
• Strengthen governance processes by identifying recurring issues and recommending improvements that reduce risk and improve readiness

What’s required

• 8–10 years of experience in information security governance, risk, and compliance or related fields
• Bachelor’s degree in information security, information systems, information technology, or another relevant discipline
• Extensive experience managing and responding to regulatory examinations and third-party evaluations
• Hands-on experience working with vendor assessment tools, such as SIG, OneTrust, and KY3P
• Proven track record writing and implementing information security policies and standards
• In-depth knowledge of global data privacy laws and regulations, including the California Consumer Privacy Act and General Data Protection Regulation
• Experience managing technology risks in a complex business environment
• Exceptional written and verbal communication skills, with the ability to present risk concepts clearly to management and cross-functional stakeholders
• Commitment to the highest ethical standards

We take care of our people

We invest in our people, their careers, their health, and their well-being. When you work here, we provide:

• Fully-paid health care benefits
• Generous parental and family leave policies
• Mental and physical wellness programs
• Volunteer opportunities
• Non-profit matching gift program
• Support for employee-led affinity groups representing women, minorities and the LGBT+ community
• Tuition assistance
• A 401(k) savings program with an employer match and more

About Point72

Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry's brightest talent by cultivating an investor-led culture and committing to our people's long-term growth. For more information, visit https://point72.com/.

The annual base salary range for this role is $175,000-$275,000 (USD), which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.

Diversity

Point72 invites you to provide the following information to assist it in tracking the effectiveness of its diversity initiatives in connection with its recruitment outreach. The provision of this information is voluntary and failure to provide it will not subject you to any adverse treatment. Where provided, the information will be kept confidential and will not form part of your application. No information will be published or used in any way which allows any individual to be identified.