Risk

• Support project scoping, approach design, work planning, team structure, and effort and timeline estimation.
• Deliver technology risk and advisory engagements within agreed scope, timelines, budgets, and quality expectations.
• Facilitate client meetings and develop clear reports, presentations, recommendations, and other deliverables.
• Identify, manage, and escalate project risks, issues, dependencies, and resource constraints.
• Support a range of technology risk, cybersecurity, regulatory, governance, and controls advisory engagements.
• Identify and assess technology risks and evaluate the effectiveness of associated governance, processes, and controls.
• Apply recognized risk and control frameworks to assess client environments and develop practical recommendations.
• Review policies, standards, procedures, risk assessments, and control documentation for completeness, consistency, and alignment.
• Support regulatory and industry-standard assessments, including evaluating whether relevant risks and requirements are appropriately addressed.
• Identify opportunities to strengthen, standardize, rationalize, or automate risk and control activities.
• Demonstrate an understanding of control design and operating effectiveness, including control objectives, testing approaches, evidence requirements, and documentation of conclusions.
• Support control assessment and testing activities across IT general controls, application controls, business controls, and technology-dependent controls.
• Provide day-to-day direction, coaching, and mentoring of junior team members.
• Lead cross-functional teams and drive security initiatives to completion.
• Contribute to business development, client delivery, and practice growth.
• Support employee growth through Optimus SBR’s Career Development Program (CDP).

Associate/Senior Associate in Technology Services Group advising on technology risk solutions

Senior Associate, Risk – Technology Services Group

Join Optimus SBR as an Associate/Senior Associate in Technology Services Group. Focus on technology risk advisory and delivery with a collaborative, high-performing team in consulting.

• Support the enterprise-focused TPRM policies and standards across the full lifecycle.
• Lead the execution of the annual TPRM Risk Oversight Program Self-Assessment and Process Criticality Assessments to ensure robust framework compliance.
• Serve as the primary subject matter expert on TPRM requirement applicability, providing guidance to the business and participating in broader partner risk assessments.
• Own and lead the end-to-end remediation of TPRM-related risk issues, ensuring sustainable, well-managed solutions are implemented.
• Shape and maintain the TPRM Risk Taxonomies and Process Diagnostic guidance to ensure consistency and clarity across the enterprise.
• Act as a key partner and facilitator for relevant first-line and second-line audits, regulatory examinations, and Process Level Assessments.
• Support Designated Mandate Owners (DMO) with rigorous requirement fulfillment and annual attestation processes.

Principal Associate leading Third Party Risk Management at Capital One

Principal Associate, Operational Risk Management, Third Party Risk Manager

Principal Associate leading Third Party Risk Management at Capital One. Driving strategy and integrity of the Third Party Risk Management Framework across the enterprise.

• Activate validated data and workforce-related risks into structured remediation or formal acceptance pathways, ensuring rigor in data governance, data quality, entitlements, and workforce control remediation plans.
• Serves as the control-layer function for risk activation across data lifecycle controls and workforce management-related processes, validating evidence, enforcing assurance gates, and maintaining clear residual risk posture.
• Convert validated data and workforce risks into proper remediation, compensating control, or acceptance routes ensuring response pathways align to data governance, data quality, access/entitlement, or workforce control gaps.

Principal Risk Response Activation & Assurance Lead at AT&T overseeing data and technology risk remediation

Risk Response Activation – Assurance Lead

Principal Risk Response Activation & Assurance Lead at AT&T overseeing risk response across data, technology, and workforce management. Focused on validation, governance, and remediation strategies for effective risk management.

• Identify, assess, and document IAM and Insider Threat risks, evaluate control effectiveness, and proactively address emerging threats and vulnerabilities.
• Continuously evaluate emerging security threats impacting Identity and Access Management (IAM) and Insider Threat programs, proactively recommending mitigations and enhancements to existing security controls.
• Drive efforts around Issues Management and Remediation in line with the Technology Risk Management program.
• Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond, and monitor key risks to keep AT&T and our customers safe and resilient.
• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation, and audit readiness efforts.

Cyber Risk Management Principal overseeing technology risk lifecycle for AT&T.

IAM & Insider Threat Risk Principal

Cyber Risk Management Principal responsible for IAM and Insider Threat domains at AT&T. Overseeing risk management lifecycle and advising on security posture for the organization.

• Manage the lifecycle of the Directorate's contracts, from onboarding to renewals and terminations;
• Oversee supplier governance and support strategic management of the contract portfolio;
• Identify opportunities for supplier consolidation, tool rationalization and cost optimization;
• Conduct contract analyses, assess risks, terms and opportunities for continuous improvement;
• Monitor purchasing and payment processes in partnership with Procurement, Finance, Legal and S2P teams;
• Ensure the contractual databases and area KPIs are up to date and reliable;
• Support integration processes following acquisitions, incorporating new contracts and suppliers into governance models;
• Administer governance of corporate cards used to procure tools and services;
• Serve as a focal point for technical leadership, supporting decisions related to the supplier and contract portfolio;
• Propose process improvements, automations and controls that increase the operational efficiency of the area.

Analyst of Contracts managing the life cycle of contracts for the governance area

Senior Contracts Analyst – IT Governance

Analyst of Contracts responsible for managing contracts from onboarding to renewals in the governance area. Supporting strategic management and optimization of supplier relationships and contracts.

• Serve as IGA hands on leader for Identity Governance & Administration (IGA), managing vendors to ensure they meet KPIs, KRIs, and have strong understanding of IGA controls
• Lead and contribute to the design, implementation, and continuous improvement of identity governance capabilities
• Partner with AI Business and Digital and Technology teams to build requirements that meet Guardian non-human identity capabilities
• Design and implement scalable provisioning and deprovisioning solutions across enterprise systems and applications
• Partner with business stakeholders and application owners to gather requirements and translate them into technical designs and governance models
• Integrate IAM/IGA solutions with enterprise systems, such as SailPoint, CyberArk, OKTA etc
• Evaluate the current identity governance landscape, identify gaps, and drive improvements in security, scalability, and user experience
• Establish and support governance processes aligned with regulatory and audit requirements
• Develop documentation, standards, and runbooks to support consistency, scalability, and audit readiness
• Collaborate with cybersecurity, infrastructure, and compliance teams to align identity governance controls with enterprise security strategy
• Stay current with industry trends, emerging technologies, and best practices in IAM and identity governance

Identity Governance & Administration Lead managing vendors in a regulated environment

Identity Governance & Administration Lead

Identity Governance & Administration Lead handling access governance and identity lifecycle management. Partnering with HR, legal, and cybersecurity teams to deliver secure identity solutions.

• The role is responsible for the governance, oversight, and management of all data related activities for Warranty North America including training and development of the data subject matter experts and data stewards committee.
• Oversight of data controls and quality of data, report development, and matters related to business intelligence.
• Ensure that all Warranty Operations adheres to the General Insurance data governance bulletins, standards, policies, procedures, and guidelines while operating within approved limits and best practices for the Warranty data operating model.
• Lead a team of data analysts with cross-functional team oversight.
• Oversee the Warranty data operations and business intelligence strategy for a high transactional business unit within the General Insurance business unit at AIG.
• Make recommendations to bring about efficiency and change.
• Perform additional managerial and leadership duties as assigned.

Director of Warranty Data Governance overseeing data operations and business intelligence.

Director – Warranty Data Governance

Director of Warranty Data Governance managing data oversight and analytics at AIG. Leading a team to enhance customer satisfaction and operational efficiency in warranty services.

• Design and/or operationalize 1LOD processes and key controls in line with enterprise Model Risk requirements and RBC’s Model Risk Transformation
• Strengthen 1LOD accountability in Model Risk, including increasing awareness of Model Risk-related requirements and roles and responsibilities
• Lead or monitor key 1LOD control execution and governance activities (e.g., model inventories) and enhance the control environment as applicable
• Review enterprise requirements and collaborate with key stakeholders to drive or influence policy, standard, and process alignment and simplification across CUSO entities
• Drive or influence enhanced risk metrics to ensure comprehensive risk coverage and accurate reflection of the Model Risk profile
• Partner with key stakeholders to shape how generative and agentic AI-related considerations are integrated into RBC’s Model Risk management’s processes and controls
• Lead 1LOD risk profile reporting and develop data-driven insights; also support RBC’s risk appetite reporting processes, including driving consistent risk narratives where applicable
• Lead and/or contribute to Working Groups and targeted initiatives
• Promote the use and integration of Technology tools to increase efficiency and effectiveness
• Lead and/or coordinate responses to regulatory exams and internal reviews; develop remediation plans as applicable

Director, Model Risk responsible for ensuring RBC’s model risk control environment is effective.

Director, Model Risk

Director, Model Risk leading control environment initiatives across RBC’s Capital Markets and ensuring compliance with Model Risk requirements. Collaborating with stakeholders to enhance the overall Model Risk profile.

• Conduct detailed analysis of catastrophe risks, including earthquakes, hurricanes, floods, and other natural disasters
• Utilize catastrophe modeling software to assess potential losses and develop risk scenarios
• Collaborate with underwriters, actuaries, and other stakeholders to evaluate risk exposure and pricing strategies
• Monitor industry trends and regulatory changes related to catastrophe risk management
• Prepare reports and presentations for senior management, highlighting risk exposure and mitigation strategies
• Develop and maintain catastrophe risk models, ensuring accuracy and reliability
• Participate in cross-functional teams to enhance risk assessment processes and improve risk management practices

Catastrophe Risk Analyst assessing company’s exposure to catastrophes

Catastrophe Risk Analyst

Catastrophe Risk Analyst role at Ryan Specialty analyzing and managing catastrophe risks. Collaborating with teams to enhance risk assessment strategies and reporting key findings.

• We are seeking an experienced Identity & Access Management (IAM) Leader to build and lead our enterprise IAM function.
• Reporting to the Chief Information Security Officer (CISO), this role is responsible for IAM strategy, architecture, delivery, and operations across workforce, customer, and non-human identities.
• This leader will define the IAM vision and roadmap, oversee key identity transformation initiatives, manage vendors and delivery partners, and lead a globally distributed team in a complex, matrixed environment.
• Define and lead the enterprise IAM strategy, operating model, and roadmap aligned to business, risk, and regulatory priorities.
• Build and scale the IAM organization to include team structure and hiring plans.
• Partner across Cybersecurity, IT, HR, Legal, Privacy, Risk, Internal Audit, and business teams to deliver consistent identity outcomes.
• Oversee major IAM transformation initiatives, including program execution and budget accountability.
• Establish metrics and reporting to demonstrate program maturity, business value, and risk reduction.
• Lead the design and maturity of Identity Governance and Administration capabilities, including lifecycle management, access requests, certifications, role management, and separation of duties.
• Drive the strategy, implementation, and maturation of enterprise IGA capabilities using platforms such as SailPoint, Microsoft Entra ID Governance, or similar solutions.
• Oversee identity lifecycle management for workforce, contractors, partners, and non-human identities.
• Lead the strategy and maturity of the firm’s Privileged Access Management program, including vaulting, credential management, session controls, and privileged access governance.
• Provide strategic leadership for PAM capabilities and related tooling, including platforms such as Delinea, CyberArk, or similar solutions.
• Establish standards for privileged access, secrets management, and just-in-time elevation across human and machine identities.
• Lead enterprise authentication and access capabilities, including SSO, MFA, conditional access, federation, and modern authentication methods.
• Drive identity standards for cloud and workload access across Guidehouse’s hybrid and multi-cloud environments.
• Align IAM capabilities to security, compliance, and audit requirements across applicable regulatory and control frameworks.
• Lead, coach, and develop a team spanning IAM architecture, engineering, operations, and governance.

Identity Governance & Administration Leader overseeing IAM strategy and function at Guidehouse

Identity Governance & Administration Leader

Experienced IAM Leader responsible for enterprise IAM strategy and operations at Guidehouse. Leading a global team building identity governance and privileged access management capabilities.

Find Your Next Role

See all jobs on JobTailor