Manager, IT Risk Management
Sullivan & Cromwell LLP
Cyber Security
Operations Risk Lead
Affirm
full-time
Posted on:
Origin: • 🇺🇸 United States • California
Visit company websiteSalary
💰 $88,000 - $140,000 per year
Job Level
Senior
About the role
- Lead incident and issue management processes, ensuring rapid triage, root cause analysis, customer harm mitigation, and timely cross-functional remediation.
- Collaborate with Legal and Compliance to support regulatory reporting and ensure all incidents meet applicable requirements.
- Establish and run control testing and risk assessments to evaluate the effectiveness of operational and technical controls.
- Develop tools and strategies to improve risk visibility, data normalization, and process automation.
- Provide concise risk reporting and status updates to senior leadership.
- Assess risk in technical systems, third-party vendors, and internal processes; define mitigation strategies and ensure timely execution.
- Foster a risk-aware culture and serve as a subject matter expert on operational and technical risk across the organization.
- Partner with your Manager and team members to support team morale, development, and shared purpose through active coaching and engagement.
- Lead and contribute to risk-related initiatives across cross-functional programs, audits, and regulatory reviews.
Requirements
- Bachelor’s degree in Risk Management, Business, Finance, or a related field.
- 5–7+ years of experience in operational or technical risk management, ideally within financial services or highly regulated industries.
- Deep familiarity with risk and controls frameworks, issue management lifecycle, and cross-functional risk mitigation.
- Demonstrated ability to lead complex, high-stakes projects across technical and non-technical teams.
- Strong written and verbal communication, analytical thinking, and stakeholder engagement.
- Experience navigating regulatory requirements and supporting compliance readiness.
- Flexibility to support incident response and critical operations outside of standard business hours, including on-call rotations during peak periods.
- Certifications in risk management (CRMA, CIA, or equivalent) preferred but not required.
- Experience in the servicing space (e.g., customer support, fraud ops, dispute resolution) is a plus but not required.
