Tech Risk and Controls Lead — Tech Resiliency Testing

Join our team to play a pivotal role in mitigating tech risks and upholding operational excellence, driving innovation in risk management.

As a Tech Risk & Controls Lead within the Infrastructure Platforms (IP) team, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

Within IP, you will lead Technology Resiliency testing across the firm's datacenter and cloud estate worldwide. You will own the planning, execution and closure of resiliency events. You will represent IP for Technology Resiliency, partnering closely with lines of business and Cybersecurity and Technology Controls, and help keep improving our Resiliency Operating Framework in line with firmwide and regulatory obligations. AI is central to how this role operates. We are looking for a leader who defaults to AI-assisted ways of working: automating manual effort, speeding up documentation, mining test and incident data for insight, and raising the quality and speed of every process the team owns. This role requires flexibility to work weekends, on average once a month, as many resiliency events are scheduled outside business hours.

Job responsibilities

- Own the end-to-end lifecycle of datacenter and cloud resiliency test events, from scoping against current compliance status and building the execution schedule to preparing run-books and managing deliverables such as change records and the testing timetable
- Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements
- Lead live test execution on behalf of IP, running the command center, securing participation from all stakeholders and keeping business partners and senior management informed throughout
- Identify, quantify and communicate resiliency risk through post-test and post-incident analysis, evaluating successful and failed recoveries, performing root cause analysis, and driving re-tests or corrective actions through to closure
- Champion practical AI adoption across the team, using LLM tools such as Claude and AI-assisted development environments such as VS Code to automate manual effort, accelerate run-book and documentation production, and reduce touchpoints during failover and recovery events
- Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations
- Apply AI to analyze test results, incident history and compliance data at scale, surfacing recurring failure modes and remediation priorities, and embed reusable prompts and patterns into the team's operating model while coaching colleagues on effective, responsible use
- Drive the resiliency roadmap across public and private cloud and cyber resiliency controls, using AWS services to design, test and evidence multi-region, multi-availability-zone and hybrid datacenter-to-cloud recovery
- Monitor and evaluate the effectiveness of resiliency controls against Firmwide Business Resilience standards, including Technology Recovery Action Plans (TRAP) for cyber and data-loss scenarios, identifying gaps and recommending enhancements
- Execute reporting and governance of test compliance, controls and issue management, giving senior management regular insight into risks, exceptions, requests not to test and escalations
- Develop and maintain trusted relationships with application and product owners, LOB technologists, Cybersecurity and Technology Controls, and Firmwide Business Resilience partners to drive alignment on resiliency outcomes

Required qualifications, capabilities, and skills

- 5+ years of experience or equivalent expertise in technology risk management, cybersecurity, or a related field, with a focus on regulatory compliance and risk mitigation
- Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
- Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.
- Strong background in overall technology experience, with hands-on platform, infrastructure or production support roles
- Demonstrated experience planning and coordinating datacenter or cloud resilience, disaster recovery or technology power-down events, with working fluency in failover and failback strategies and concepts such as RTO, RPO, HA and DR
- Hands-on experience with AWS products and services, including those used for resilience, backup, replication and multi-region recovery
- Practical, hands-on proficiency with LLM tools such as Claude and AI-assisted development environments such as VS Code, applied to automating and improving day-to-day work
- Proficient knowledge of risk management and technology resiliency frameworks, control evaluation, design and governance, and risk assessment and reporting
- Program or project management discipline across scope, schedule, critical path and deliverables, with proven success leading a team or function to metrics and quality targets, backed by strong analytical and problem-solving skills
- Demonstrated ability to influence executive-level decision-making and negotiate competing priorities, with confident executive presence and excellent verbal, written and presentation skills
- BS/BA degree in a related technical or business discipline, or equivalent practical experience

Preferred qualifications, capabilities, and skills

- Financial services industry experience, with knowledge of financial industry regulatory requirements for technology resiliency and familiarity with Control Objectives and Procedures
- Experience in large, global, multi-cultural organizations supporting mission-critical, highly available applications, including third-party vendor management
- Track record of delivering measurable efficiency gains through AI and automation, including prompt engineering, AI agents or workflow orchestration, and the ability to evangelize and scale those practices across a team
- Modern engineering skills such as scripting or programming, data analytics and cloud engineering (for example Infrastructure-as-Code, CI/CD, observability tooling), with a demonstrated desire for continued self-improvement
- Business continuity accreditation (for example CBCP) and/or AWS certification (for example Cloud Practitioner or Sys Ops Administrator)