Lighthouse Technology Services is partnering with our client to fill their Risk Process Technical Specialist (Archer) position! This is a 12-18 month contract and will be hybrid in Buffalo, NY.
This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered.
What You'll Be Doing:
Lead the implementation and enhancement strategy for centralized control assessment technologies including Archer VRM platform
Drive major Archer platform upgrade initiatives and configure systems to support enterprise risk governance frameworks
Design and document technical compliance standards and operational procedures for centralized control assessment technologies
Develop comprehensive test scripts for platform implementations and upgrades, documenting results and ensuring quality delivery
Support recurring business-as-usual activities including monthly, quarterly, and annual risk reporting and appetite refresh processes
Collaborate with technology teams and vendor partners to evaluate emerging tools for vulnerability scanning and penetration testing
Research industry trends and train team members on evolving centralized control assessment best practices and regulatory requirements
Establish escalation procedures to track and remediate control assessment findings across the organization
Mentor and provide direction to less experienced Risk Process team members on technical assessments and methodologies
Conduct deep dives into issues management, identifying process breakdowns and implementing governance improvements
What You'll Need to Have:
20+ years of experience as a Risk Management Generalist with proven ability to work independently without close supervision
Strong hands-on experience with Archer VRM or similar vulnerability risk management lifecycle solutions
Demonstrated expertise in Risk Appetite frameworks, Risk Identification, and Risk Assessment processes
Solid understanding of Agile methodologies and experience working within Agile environments
Experience with eGRC platforms, vulnerability assessment tools, and cybersecurity standards
Proven technical writing skills with ability to develop clear documentation and operational procedures
Strong background in Audits, Policy Management, and Risk & Controls frameworks