Vice President, Technology Risk & Controls

Role Overview

• Help develop and mature technology risk and control frameworks aligned to enterprise technology risk priorities.
• Define control objectives that clearly articulate intended risk outcomes and expected control performance.
• Establish traceability across risks, controls, standards, metrics, issues, and remediation activities.
• Support consistent adoption of risk and control practices across technology organizations.
• Drive initiatives to mature technology risk policies, standards, and implementation requirements.
• Partner with stakeholders to improve clarity, consistency, and usability of control requirements.
• Ensure alignment between policy intent, technology controls, and operational execution.
• Facilitate cross-functional working groups and stakeholder engagement activities to support adoption and accountability.
• Design outcome-based control effectiveness measures that provide insight into whether controls are reducing risk as intended.
• Help develop Key Risk Indicators, Key Performance Indicators, and forward-looking risk signals that provide visibility into technology risk exposure and resilience.
• Translate technical and operational data into executive-level insights that support technology risk governance, prioritization, and decision-making.
• Improve transparency of control effectiveness, remediation progress, and measurable risk reduction outcomes.
• Identify systemic technology risk themes and partner with technology leaders to drive measurable reduction in risk exposure.
• Support enterprise initiatives focused on technology resilience, software development practices, asset lifecycle management, control modernization, and emerging technology risk domains.
• Translate risk findings, control weaknesses, and operational trends into action plans with clear ownership, milestones, and measurable outcomes.
• Track remediation progress and evaluate whether completed actions materially reduce risk.
• Help leadership prioritize risk reduction efforts based on severity, business impact, control effectiveness, and resilience outcomes.

Requirements

• Strong experience in technology risk management, technology controls, cybersecurity, operational risk, engineering risk management, or related disciplines.
• Strong understanding of technology control frameworks and industry standards such as NIST, COBIT, ITIL, ISO 27001, CSA CCM, or equivalent.
• Experience developing policies, standards, control objectives, metrics, risk indicators, or technology risk frameworks.
• Experience designing control effectiveness measures, or performance measurement capabilities.
• Strong program management, stakeholder management, and change leadership capabilities.
• Excellent written and verbal communication skills, with the ability to translate complex technology risks into clear executive-level narratives.
• Proven ability to influence Engineering, Information Security, Risk, Audit, and business stakeholders to drive complex initiatives.

Tech Stack

• Cyber Security

Benefits

• healthcare
• leave benefits
• retirement benefits
• annual discretionary bonus