Technology Risk Manager

Title: Technology Risk Manager

Location: Richmond, VA

Salary: $120,000 - $140,000

Company Summary:

We are partnered with a leading insurance and financial services organization seeking a Technology Risk Manager to join its Enterprise Risk team. Ideal candidates have 5+ years of technology risk, cybersecurity risk, GRC, or risk analytics experience and are well versed in technology controls, cybersecurity frameworks, risk assessments, and data analytics. In this role, you will be responsible for assessing technology and cybersecurity risks, evaluating controls, leveraging data and automation tools, and supporting risk management initiatives across the organization.

Responsibilities

• Lead technology and cybersecurity risk assessments across applications, infrastructure, cloud, and data environments.
• Evaluate technology and cybersecurity controls to identify risks and improvement opportunities.
• Maintain risk registers, monitor remediation efforts, and track key risk indicators.
• Partner with technology, security, and business stakeholders to identify and mitigate risk.
• Develop dashboards, reporting, and risk analytics using Power BI and other tools.
• Create executive-level presentations and risk reporting for senior leadership.
• Leverage automation, AI, and data analytics to improve risk management processes and reporting.
• Support regulatory, compliance, and audit activities.
• Monitor emerging risks across cybersecurity, cloud, AI, and third-party environments.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Risk Management, Finance, Business, or a related field.
• 5+ years of Technology Risk, Cybersecurity Risk, GRC, Risk Management, or Risk Analytics experience.
• Experience conducting risk assessments and managing remediation activities.
• Strong understanding of technology and cybersecurity risk frameworks including NIST, ISO 27001, COBIT, or SOC.
• Experience with Power BI, Excel, and data analytics tools.
• Ability to create executive-level reporting and communicate risk insights to stakeholders.
• Experience leveraging automation, AI, and technology tools to improve processes.
• Professional certifications such as CISA, CRISC, CISM, or CISSP preferred.