Senior Lead Control Management Officer - Cloud Platform

Lead Technology Controls engagement with the Cloud Platform organization Provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives Partner with Infrastructure Engineering, Cloud Platform Engineering, Information Security, Technology Risk, Audit, and Control Management teams Perform risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and automation strategy advancement Advise senior technology and control management leaders on risk mitigation strategies for complex infrastructure and cloud risks Design, implement, and continuously improve control frameworks for infrastructure, cloud platforms, storage, compute, network, database, middleware, platform engineering, and Control-as-Code Monitor, measure, evaluate, and report control and risk mitigation effectiveness Lead audit, regulatory examination, horizontal review, and independent testing assessment and remediation activities Identify emerging technology risks related to cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization Support infrastructure transformation programs and cloud migration initiatives as a key control partner Lead risk and control governance activities, including executive reporting, risk committee materials, and regulatory updates Mentor and guide control officers and virtual teams Develop risk and control frameworks for enterprise infrastructure services Assess hybrid cloud, platform engineering, and infrastructure modernization risks Evaluate controls across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services Identify control gaps and develop sustainable remediation strategies with technology leaders Embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes Drive continuous compliance monitoring and automated evidence collection Establish governance standards for automated preventive, detective, and corrective controls Reduce manual control execution and testing through automation Partner with Audit, Compliance, Independent Risk Management, and regulators during reviews and examinations Coordinate issue management, root-cause analysis, and corrective action plans Analyze KRI, issue, control testing, and operational loss data for systemic risk trends Lead control health reporting and executive risk dashboards Support risk appetite monitoring and governance forums Present findings and recommendations to senior technology executives and control committees Lead control management for major infrastructure and cloud transformation programs Evaluate modernization initiatives through a risk and controls lens Integrate governance, resiliency, security, and compliance requirements into engineering processes Drive scalable control solutions that enable innovation while maintaining risk management Requirements 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through work experience, training, military experience, or education 7+ years of Control Management, Technology Risk, Information Security, or Audit experience 5+ years supporting large-scale technology organizations Deep understanding of Cloud Security, Platform Engineering, Infrastructure-as-Code, DevSecOps, Site Reliability Engineering (SRE), Control Automation, and Continuous Compliance Monitoring Experience implementing Control-as-Code frameworks Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies Experience supporting large-scale infrastructure modernization, cloud migration, or digital transformation programs Relevant certifications such as CRISC, CISA,

CISSP

, CCSP, AWS/Azure/GCP Cloud Certifications, CGRC, or ITIL Visa sponsorship is not available for this position Core Competencies Demonstrates expertise in Risk Management and Control Management within large-scale technology organizations, with a strong focus on Cloud Security, Infrastructure-as-Code, and Control Automation. Proven ability to design and implement effective control frameworks while ensuring compliance with regulatory standards. Highest-signal resume keywords Risk Management Control Management Cloud Security Control Automation Infrastructure-as-Code Hard Skills Control Design Risk Identification Governance Reporting Continuous Compliance Monitoring Control-as-Code Frameworks DevSecOps Site Reliability Engineering Cloud Migration Infrastructure Modernization Automation Strategy Soft Skills Leadership Mentoring Collaboration Communication Strategic Oversight Certifications & Qualifications CRISC CISA CISSP CCSP AWS Certification Azure Certification GCP Certification CGRC ITIL Industry Keywords OCC Heightened Standards FFIEC Guidance NIST

COBIT

Enterprise Technology Policies Tools & Technologies CI/CD Cloud Platforms Virtualization Container Platforms Automated Controls #J-18808-Ljbffr Jobtailor