Tech Risk Management Consultant Remote

Job Description:

Tech Risk Management Consultant

Must Have Technical/Functional Skills

5-10 years of experience in Technology Risk Management, IT Risk, Cyber Risk, Information Security, Audit, or Governance, Risk & Compliance (GRC).

Strong understanding of IT Risk Management frameworks:

NIST Cybersecurity Framework (CSF)

NIST 800-53

ISO 27001/27005

COBIT

COSO

SSAE18/SOC

Experience conducting:

Technology Risk Assessments

Cyber Risk Assessments

Control Testing

Security Reviews

Risk & Control Self-Assessments (RCSA)

Knowledge of:

Information Security Controls

Cloud Security Controls

Application Security Controls

Infrastructure Security Controls

Data Protection Controls

Experience managing:

Risk Registers

Risk Treatment Plans

Exceptions Management

Issue Management

Regulatory Compliance

Strong understanding of third-party/vendor risk assessments.

Experience with GRC tools such as:

Archer

ServiceNow GRC

OneTrust

MetricStream

Knowledge of regulatory and industry requirements:

• SOX
• PCI-DSS
• GDPR
• CCPA

• Experience with cloud environments (AWS, Azure, GCP) and associated risk management practices.
• Strong stakeholder management, reporting, and executive communication skills.

Roles & Responsibilities

Conduct technology and cyber risk assessments across applications, infrastructure, cloud platforms, and AI-enabled solutions.

Identify, assess, document, and monitor technology risks and control gaps.

Perform control design and operating effectiveness reviews.

Maintain enterprise risk registers and risk treatment plans.

Partner with Security, Engineering, Infrastructure, Compliance, Audit, and Business teams to evaluate technology risks.

Evalu ate cloud, AI, application, infrastructure, and third-party risks.

Assess adherence to corporate security policies, standards, and regulatory requirements.

Support audits, regulatory reviews, and compliance assessments.

Track remediation activities and validate closure of identified risks and control deficiencies.

Develop risk metrics, dashboards, and executive reports for senior management.

Review new technologies and AI solutions for associated operational, security, privacy, and compliance risks.

Support enterprise risk governance, policy development, and risk reporting processes.