Risk

• Serve as IGA hands on leader for Identity Governance & Administration (IGA), managing vendors to ensure they meet KPIs, KRIs, and have strong understanding of IGA controls
• Lead and contribute to the design, implementation, and continuous improvement of identity governance capabilities
• Partner with AI Business and Digital and Technology teams to build requirements that meet Guardian non-human identity capabilities
• Design and implement scalable provisioning and deprovisioning solutions across enterprise systems and applications
• Partner with business stakeholders and application owners to gather requirements and translate them into technical designs and governance models
• Integrate IAM/IGA solutions with enterprise systems, such as SailPoint, CyberArk, OKTA etc
• Evaluate the current identity governance landscape, identify gaps, and drive improvements in security, scalability, and user experience
• Establish and support governance processes aligned with regulatory and audit requirements
• Develop documentation, standards, and runbooks to support consistency, scalability, and audit readiness
• Collaborate with cybersecurity, infrastructure, and compliance teams to align identity governance controls with enterprise security strategy
• Stay current with industry trends, emerging technologies, and best practices in IAM and identity governance

Identity Governance & Administration Lead

• Design and/or operationalize 1LOD processes and key controls in line with enterprise Model Risk requirements and RBC’s Model Risk Transformation
• Strengthen 1LOD accountability in Model Risk, including increasing awareness of Model Risk-related requirements and roles and responsibilities
• Lead or monitor key 1LOD control execution and governance activities (e.g., model inventories) and enhance the control environment as applicable
• Review enterprise requirements and collaborate with key stakeholders to drive or influence policy, standard, and process alignment and simplification across CUSO entities
• Drive or influence enhanced risk metrics to ensure comprehensive risk coverage and accurate reflection of the Model Risk profile
• Partner with key stakeholders to shape how generative and agentic AI-related considerations are integrated into RBC’s Model Risk management’s processes and controls
• Lead 1LOD risk profile reporting and develop data-driven insights; also support RBC’s risk appetite reporting processes, including driving consistent risk narratives where applicable
• Lead and/or contribute to Working Groups and targeted initiatives
• Promote the use and integration of Technology tools to increase efficiency and effectiveness
• Lead and/or coordinate responses to regulatory exams and internal reviews; develop remediation plans as applicable

Director, Model Risk

• Lead complex investigations into suspected account takeover (ATO) incidents, exercising sound judgment to determine risk, containment, and recovery strategies
• Own end-to-end response for high-impact and executive-visible ATO cases, serving as a primary coordinator across Fraud, Customer Support, Product, Engineering, Compliance, Legal, and Leadership
• Communicate directly with customers during sensitive account security incidents, providing timely, empathetic guidance throughout the investigation and recovery process
• Help develop and continuously improve ATO investigation policies, playbooks, and operational workflows to increase consistency, quality, and speed to response
• Partner with Product, Engineering, and Risk teams to identify detection gaps and recommend improvements to authentication controls, fraud detection systems, and customer security features
• Escalate emerging account takeover trends, attacker behaviors, and fraud vectors, working with leadership and partner teams to turn findings into actionable operational and product improvements
• Provide subject matter expertise during critical incidents and help guide investigation strategy for the team's most complex and high-risk cases
• Identify opportunities to automate repetitive investigative tasks and improve tooling, operational efficiency, and customer experience
• Maintain clear, defensible investigative documentation that supports internal decision-making, regulatory requirements, and cross-functional collaboration
• Mentor teammates by sharing investigative best practices, reviewing complex cases, and contributing to onboarding and training materials

Risk Investigator – Third Party/ATO Fraud

• Own and evolve the global brand governance framework
• Partner with Legal/IP on trademark strategy, brand protection, licensing
• Serve as a lead representative and liaison to the GE Aerospace Brand Governance team
• Assure compliance with the TMLA
• Govern brand use in high-stakes contexts
• Be a trusted advisor for the organization
• Lead the global brand operations function
• Define and manage brand technology roadmap
• Build and run intake, workflow, and approval processes for brand reviews
• Manage brand health and compliance measurement
• Run periodic global brand audits across digital and physical applications
• Provide Chief of Staff support to the Global Head of Brand

Global Head of Brand Governance – Operations

• Responsible for maintaining annual contact with Comp Alliance members, including safety inspections, safety committee attendance, and training.
• Ability to communicate with members regarding their workplace injuries and safety programs.
• Identify safety hazards and recommend improvements to correct them.
• Utilize computer programs with fluency for reporting hazards and generating recommendations letter.
• Understand how to decipher workers’ compensation injury reports.
• Work well with members of the program team, including Underwriting, Claims and Marketing.
• Perform training for member employees on variety of topics, with professional use of PowerPoint presentation materials.
• Knowledge of Microsoft Teams for routine virtual training sessions.

Risk Control Specialist

• Responsible for executing the Platform’s product governance model for U.S. products and strategic initiatives
• Work closely with U.S. product owners including assessing business change impacts and governance
• Maintain the product catalogue and support change governance submissions
• Coordinate U.S. time zone specific escalations
• Certain regulatory compliance, regulatory meetings and pricing control activities

Vice President, Product Governance – Global Collateral Controls

• Support the business line’s centralized LOD1 function, including strategic vision and implementation plans, acting as business-line liaison to Enterprise Risk Management, Operational Risk Management, and Compliance in support of the company’s 3LOD program.
• Work with Compliance and other Risk functions to understand and monitor applicable regulations and requirements, assess business impact, and drive appropriate projects and processes to address needed changes.
• Partner with Enterprise Risk Management in the execution of Risk and Control Self Assessments.
• Partner with Business Continuity Management on business’ participation in BC/DR tests, and own and maintain required process and technical recovery plans.
• Assist the business-line in the management of third-party relationships, including both performance and risk management.
• Assist the business-line in the design and build of process maps in alignment with Early Warning’s Process Classification Framework.
• Own and maintain business-lines’ process inventory and internal control environment inventory.
• Design, maintain, and report metrics (KPIs and KRIs) demonstrating control effectiveness.
• Identify and self-report issues through the ERM Self-Identified Issue Process; individually and together with other LOD1 business-line members.
• Ensure risk remediation plans exist and are sufficient; track remediation plans to completion and ensure remediation is on-time and sustainable; ensure action plans and remediation of issues by risk owners.
• Support business-line Risk Acceptance Forms (RAF) process, when applicable.
• Drive periodic executive level reporting regarding business risk management activities, working closely with business-line leadership.
• Develop, in alignment with ERM’s frameworks, a 1st LOD risk management governance process across the business lines to support decision making and escalation regarding risks that may not be consistent with the business’ risk tolerance.
• Deliver education and awareness of risk ownership essentials.
• Continually monitor and update assessments of the control environment, keeping abreast of significant control issues, trends, and developments.
• Perform internal control effectiveness test plans and procedures.
• Lead a team of risk professionals in matrixed organization.
• Support the company’s commitment to risk management and protecting the integrity and confidentiality of systems and data.

Director, Risk Management – LOD1

• Manage catastrophe modeling projects from beginning to end.
• Contribute to impactful and insightful discussions with clients on their reinsurance strategy, underwriting support, pricing adequacy, and portfolio management; act as the catastrophe risk expert as part of our account teams.
• Establish and maintain strong relationships with brokers/clients/reinsurers/colleagues and assist in promptly responding to client queries and concerns.
• Develop knowledge in certain region-based or peril-based areas of catastrophe risk management services through research or experience.
• Take part in or lead internal initiatives, offering ideas and feedback to improve outcomes as well as to help develop Guy Carpenter’s thought leadership and industry expertise.

AVP/VP, Catastrophe Risk Analyst

• Ensure NDS SDLC stages include the AI-specific gates, artifact requirements, and approval checkpoints
• Maintain the NDS AI-extended SDLC (AISDLC)
• Ensure all NDS AI development and deployment initiatives complete the AI Registry & Impact Assessment process
• Verify AI-specific requirements are met at defined SDLC checkpoints
• Verify NDS associates are using approved AI tools at correct data classification levels
• Build and maintain the NDS AI compliance evidence package
• Monitor and maintain the health of NDS Jira and Confluence environments
• Document, measure, and improve system and software lifecycles

IT Program Administrator – Governance

• Reporting into the Director of Fintech Risk, we are seeking a motivated Fintech Risk Analyst who will contribute to and support a strong risk management culture in working with existing and prospective Fintech partners and business leaders across the organization.
• Serve as an individual contributor across the Bank’s BaaS portfolio to effectively identify, manage, and remediate risks
• Ongoing collaboration with various teams, including BSA, Embedded Finance, Operations, and Product, and external third party banking technology platforms
• Perform due diligence risk assessment on prospective fintech partners to assess inherent risk, control effectiveness, and residual risks associated with partnership. Present risk assessment results to senior management for review and approval prior to onboarding
• Track pre and post-launch risk and compliance requirements for newly onboarded partners
• Conduct ongoing testing, monitoring, and quality assurance activities for onboarded partners to ensure adherence to Bank policy and regulatory requirements. Track identified issues to remediation
• Serve as primary risk/compliance contact for specific fintech partners, offering expert advice and direction to ensure their programs comply with applicable regulations and align to Bank requirements, especially those related to financial crimes (BSA/AML, OFAC, fraud) and regulatory compliance (account opening, account maintenance and disclosures, bank statements, funds availability, etc.)
• Support the maintenance of a prioritized roadmap to address gaps and improve control design and testing practices
• Participate in relevant team and cross-functional meetings as required

Fintech Risk Analyst

• Design, implement, and continuously mature a comprehensive operational risk framework tailored to the unique risk profile of a cryptocurrency exchange
• Establish risk appetite statements, risk tolerance thresholds, and key risk indicators (KRIs) aligned with business strategy and regulatory requirements
• Develop and maintain the enterprise risk register, ensuring risks are properly categorized, owned, and escalated appropriately
• Lead periodic enterprise-wide risk assessments and translate findings into actionable risk mitigation strategies
• Conduct and oversee specialized risk assessments related to cryptocurrency operations, including custody risk, smart contract risk, liquidity risk, and counterparty/exchange risk
• Stay current on the evolving regulatory landscape for digital assets and assess implications for the firm's risk posture
• Evaluate risks associated with new digital asset products, trading pairs, DeFi integrations, and blockchain protocol changes
• Own the operational risk event reporting process end-to-end from identification and logging through root cause analysis, remediation tracking, and management reporting
• Develop and manage a near-miss and loss event database to drive trend analysis and lessons-learned programs
• Prepare clear, concise risk reporting packages for senior leadership, the Board Risk Committee, and other relevant regulatory bodies
• Ensure timely escalation of high-severity risk events in accordance with internal policies and applicable regulations
• Serve as a key stakeholder and subject matter expert in the firm's model risk governance program
• Partner with Quantitative Research, Data Science, and Finance teams to ensure models are validated, documented, and monitored in accordance with model risk management standards
• Identify model-related risks across trading algorithms, risk models, pricing engines, and fraud detection systems
• Collaborate with executive leadership, the Board, and external auditors to communicate the firm's risk posture and program maturity
• Champion a strong risk culture across the organization through training, awareness programs, and proactive engagement with business lines
• Manage relationships with external risk consultants, auditors, and regulatory examiners as needed
• Take a supporting role in identifying, mapping out, documenting, and rating controls and risks as part of our Risk Assessment program
• Respond to audit, partner bank, and regulatory requests

Manager, Enterprise Risk

• Execute the IT Risk Management Framework, including risk identification, analysis, and reporting.
• Conduct annual IT risk assessments, including RCSAs, targeted risk reviews, and new product/key initiative assessments.
• Maintain the IT risk register; ensure timely updates and accurate reporting of exposures.
• Perform post-mortem risk reviews for critical incidents and support operational loss reviews with ORM.
• Assist the Head of IT Risk in maintaining risk policies, standards, and procedures that align with Gemini’s enterprise risk management program and regulatory expectations (NYDFS, DFS, OCC, CFTC).
• Coordinate with Technology and Security teams to ensure policies and controls are properly implemented and followed.
• Help prepare materials for risk committees, regulators, and senior leadership.
• Partner with Internal Audit, IT, Security, and BCM to assess design and operating effectiveness of IT and cyber controls.
• Support control testing for internal/external audits, RCSAs, and regulatory examinations.
• Track remediation and validate closure of issues using GRC tool(s).
• Serve as a liaison between IT Risk and other functional areas, facilitating risk awareness and control adoption.
• Provide guidance to IT teams on risk and control considerations for new projects, initiatives, and system changes.
• Contribute to risk awareness training and initiatives across the organization.
• Assist in the development of periodic risk dashboards and key risk indicators (KRIs).
• Support the Head of IT Risk in communicating IT risk posture to senior leadership.
• Support development of IT & Security dashboards; ensure metric accuracy and timely updates.
• Execute and maintain the Business Continuity Management (BCM) program, including governance artifacts, testing, audits, and issue remediation.
• Assess and manage business continuity risks, including people dependencies, facilities, physical security, and third-party operational resilience.
• Drive crisis response and regulatory notifications (e.g., NYDFS), including escalation, documentation, and external stakeholder coordination.
• Validate vendor BCM compliance and define and monitor business impact thresholds (RTOs, RPOs, tolerances), supporting ongoing impact assessments and reporting.

Lead, IT Risk

• Design and implement Data Governance policies, standards, and stewardship.
• Build MDM processes including concordance, survivorship, and entity matching.
• Develop Python & SQL solutions for data quality, automation, validation, and profiling.
• Define and monitor data quality rules, dashboards, and remediation processes.
• Partner with Data Engineers, Architects, and Business teams to deliver trusted enterprise data.
• Maintain governance documentation, business glossary, and data standards.

Senior Data Governance, MDM Specialist

• Leveraging advanced analytics techniques to extract insights from large datasets and drive data-driven decision-making
• Utilizing skills in data manipulation, visualization, and statistical modeling to support clients in solving complex business problems
• Building meaningful client connections and managing relationships to anticipate and address client needs
• Navigating complex situations to grow personal brand and deepen technical skills
• Developing and implementing data validation processes to maintain data integrity and security
• Conducting exploratory data analysis to inform insights and recommendations for strategic goals
• Creating dashboards and visualizations using tools like Power BI and Tableau to enhance data presentation
• Collaborating with teams to integrate data-driven insights into client operations and optimize performance

Senior Associate, Data Validation Risk

• Leading data validation and risk management initiatives to support client engagements
• Utilizing advanced analytics techniques to extract insights from complex datasets
• Driving the development and implementation of data-driven strategies to optimize client operations
• Overseeing the integration and manipulation of data using tools like Alteryx and Python
• Guiding teams in the creation of dashboards and visualizations using Power BI and Tableau
• Promoting the use of predictive analytics and statistical modeling to solve business challenges
• Confirming data integrity and security within analytics frameworks
• Mentoring and developing the next generation of leaders in data analysis
• Collaborating with stakeholders to identify and address data quality improvement opportunities
• Cultivating relationships with clients to enhance satisfaction and drive business growth

Data Validation Risk – Director

• Conduct technical security assessments of third-party applications, vendors, and service providers beyond traditional questionnaire-based reviews
• Evaluate API security, authentication mechanisms, data flows, and integration architectures for vendor solutions
• Assess generative AI vulnerabilities in third-party applications, including model security, data privacy, and information disclosure risks
• Perform security reviews of Model Context Protocol (MCP) servers and implementations
• Review vendor security documentation, architecture diagrams, and technical controls
• Identify security gaps and provide risk-based recommendations and guardrails to stakeholders
• Collaborate with procurement, legal, and business teams on vendor onboarding and ongoing monitoring requirements.
• Support Shadow IT discovery and risk assessment initiatives using enterprise tooling
• Evaluate security risks associated with unsanctioned applications and browser extensions
• Assist with managing and reducing risk relating to non-human identity (NHI) including service accounts and API keys.
• Assess access control implementations across enterprise applications and also members of HubSpot’s global contractor base.
• Review OAuth grants, SAML configurations, and application integrations for security risks
• Support identity governance initiatives and access certification processes
• Collaborate and support the enterprise application management team on shared security initiatives

Senior Third Party Risk & Controls Specialist

• Partner directly with the Chief Risk Officer to define organizational strategy, long-term priorities, and execution plans across the Risk organization.
• Help shape the future of Imprint's Risk organization by identifying opportunities to improve organizational effectiveness, strategic focus, and cross-functional collaboration.
• Lead strategic initiatives that span Fraud, Credit, Collections, Operational Risk, Product, Engineering, Finance, Legal, Capital Markets, and Operations.
• Translate complex analytical and technical work into clear business strategies, executive communications, and actionable roadmaps.
• Partner with Product and Engineering leaders to ensure risk initiatives are prioritized, well-defined, and effectively executed.
• Develop frameworks that help leadership evaluate tradeoffs between customer experience, portfolio performance, operational complexity, and business growth.
• Prepare executive presentations, board materials, strategic planning documents, and business reviews that clearly communicate the Risk organization's priorities and impact.
• Identify organizational bottlenecks, execution risks, and process gaps, driving improvements that enable the team to scale effectively.
• Establish planning processes, governance, and operating mechanisms that improve transparency, accountability, and decision-making across the organization.
• Serve as a connector across the business, ensuring Risk is a proactive, collaborative partner to teams across Imprint.

Director, Risk Strategy – Execution

• Ensure NDS SDLC stages include the AI-specific gates, artifact requirements, and approval checkpoints required by the Nelnet AI Governance Policy
• Maintain the NDS AI-extended SDLC (AISDLC)
• Ensure all NDS AI development and deployment initiatives complete the AI Registry & Impact Assessment process
• Verify AI-specific requirements are met at defined SDLC checkpoints
• Verify NDS associates are using approved AI tools at correct data classification levels
• Build and maintain the NDS AI compliance evidence package
• Monitor and maintain the health of NDS Jira and Confluence environments; diagnose and resolve platform-level issues
• Partner closely with development teams and leadership to support active products and ensure adherence to standards
• Document, measure, and improve system and software lifecycles to meet business objectives across NDS IT programs
• Interpret contractual and regulatory documentation to identify gaps in lifecycles, policies, and procedures
• Document processes and procedures in an organized, user-friendly format
• Provide clear and concise verbal and written communication tailored to the appropriate audience
• Research, assess, and train others on non-development tools used across the segment
• Perform value stream mapping for processes owned within NDS IT to streamline workflows and eliminate waste

• Provides independent second-line oversight, assessment, and credible challenge of first-line technology risk management activities across the company.
• Partners across Technology, Security, Product, Data, and other business functions to evaluate risk and control practices, including risk assessments, issues management, control validation, key risk indicators, governance reporting, and escalation.
• Helps ensure technology-related risks are managed consistent with enterprise risk appetite, regulatory expectations, and sound industry practice.
• May support one or more focus areas based on business need, including Enterprise Technology Risk, Data Security Risk, Access Management Risk, Offensive Security Risk, Vulnerability Management Risk, AI Security Risk, and Asset and Inventory Management Risk.

Risk jobs in New York

See all jobs on JobTailor

Identity Governance & Administration Lead

Director, Model Risk

Risk Investigator – Third Party/ATO Fraud

Global Head of Brand Governance – Operations

Risk Control Specialist

Risk Control Specialist

Vice President, Product Governance – Global Collateral Controls

Director, Risk Management – LOD1

AVP/VP, Catastrophe Risk Analyst

IT Program Administrator – Governance

Fintech Risk Analyst

Manager, Enterprise Risk

Lead, IT Risk

Senior Data Governance, MDM Specialist

Senior Associate, Data Validation Risk

Data Validation Risk – Director

Senior Third Party Risk & Controls Specialist

Director, Risk Strategy – Execution

IT Program Administrator – Governance

Principal, Access Management Risk