Technology Risk Management Specialist
$175,000-$275,000
Apply (opens in a new tab)Technology Risk Management Specialist
Posted 38 days ago
SENIORITY
Lead
SALARY
$175,000-$275,000
About the role
- Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives
- Lead independent assessments of the information security program, including regulatory examinations and third-party evaluations
- Identify technology risks across a complex business environment and drive mitigation aligned with our firm's standards and control expectations
- Investigate data privacy inquiries and privacy-related events, assess business impact, and coordinate timely response activities
- Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans
- Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations
- Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions
- Maintain accurate risk, policy, privacy, and assessment documentation to support transparency, accountability, and examination readiness
- Strengthen governance processes by identifying recurring issues and recommending improvements that reduce risk and improve readiness
- What's required8–10 years of experience in information security governance, risk, and compliance or related fields
- Bachelor's degree in information security, information systems, information technology, or another relevant discipline
- Extensive experience managing and responding to regulatory examinations and third-party evaluations
- Hands-on experience working with vendor assessment tools, such as SIG, OneTrust, and KY3PProven track record writing and implementing information security policies and standards
- In-depth knowledge of global data privacy laws and regulations, including the California Consumer Privacy Act and General Data Protection Regulation
- Experience managing technology risks in a complex business environment
- Exceptional written and verbal communication skills, with the ability to present risk concepts clearly to management and cross-functional stakeholders
- Commitment to the highest ethical standards
- We take care of our people
- We invest in our people, their careers, their health, and their well-being.
- When you work here, we provide: Fully-paid health care benefits
- Generous parental and family leave policies
- Mental and physical wellness programs
- Volunteer opportunities
- Non-profit matching gift program
- Support for employee-led affinity groups representing women, minorities and the LGBT+ community
- Tuition assistanceA 401(k) savings program with an employer match and more
- About Point72Point72 is a leading global alternative investment firm led by Steven A. Cohen.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
