IT Operational Risk Manager

This position sits within an operational risk function and supports the oversight of technology-related risk across the organization. The role partners closely with teams in information security, IT, data protection, privacy, and business continuity to strengthen risk identification, assessment, and monitoring practices. The position combines hands‑on execution with program development, including enhancing frameworks, improving reporting, and helping ensure risks, control gaps, and remediation efforts are clearly tracked and communicated. Key Responsibilities Technology Risk Identification and Assessment Identify and assess operational risks related to technology, information security, and data practices Partner with cross-functional teams to evaluate control environments and uncover gaps Support risk assessments across areas such as cybersecurity, privacy, data protection, business continuity, and emerging technologies Track risk themes and trends to highlight areas requiring increased attention Risk Framework and Governance Support the development and refinement of risk frameworks, methodologies, and documentation standards Contribute to the design and maintenance of risk taxonomies and control libraries Drive consistency in how risks are identified, evaluated, and reported across teams Work within a GRC environment to support risk and control activities Risk Reporting and Metrics Assist in building reporting for risk exposure, control gaps, and remediation progress Develop dashboards, metrics, and key risk indicators to provide visibility into risk trends Prepare materials for senior stakeholders and governance forums Translate technical risk concepts into clear, business-focused insights Privacy and Data Protection Support risk assessments tied to data usage, privacy practices, and third‑party relationships Partner with relevant stakeholders to identify and document privacy‑related risks Assist in tracking issues, remediation activities, and risk outcomes tied to data protection efforts Business Continuity and Resilience Participate in business impact analyses and continuity planning efforts Help identify critical systems, dependencies, and recovery requirements Assess technology‑related continuity risks and support mitigation planning Emerging Technology and AI Risk Contribute to governance and risk management practices for emerging technologies Support assessments, control design, and monitoring related to AI use cases Partner across teams to evaluate risks tied to new tools and platforms Issue Management and Remediation Track remediation efforts and follow up on action plans and target dates Support escalation of high‑risk or overdue items Ensure issues and responses are documented appropriately Regulatory Alignment Support alignment with regulatory expectations and industry standards related to technology risk Stay informed on evolving requirements across cybersecurity, privacy, and data protection Partner with compliance and legal teams to assess impact of regulatory changes Stakeholder Collaboration Build relationships across IT, security, privacy, compliance, and business teams Communicate risk insights and updates clearly to a range of audiences Act as a trusted partner in strengthening risk awareness and practices Qualifications Experience in operational risk, technology risk, or a related discipline Knowledge of information security, data protection, privacy, and business continuity concepts Experience supporting risk assessments, control evaluations, and issue tracking Familiarity with GRC tools and risk management processes Strong analytical and communication skills, with the ability to translate technical topics into business language Ability to work across multiple stakeholders and functions Preferred Background Experience in a regulated industry such as financial services or similar environments Exposure to cross‑functional teams including IT, security, privacy, and compliance Experience supporting risk frameworks, reporting, and governance practices Familiarity with emerging technology or AI‑related risk #J-18808-Ljbffr Selby Jennings