Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 79 days ago

Director – Risk Data

247Hire

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDirector – Risk Data247Hire · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on 247Hire's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 79 days ago

The posting

The Director, IT Line 1 Risk will play a senior leadership role in strengthening the technology risk and control environment by establishing a centralized, authoritative risk and control database that connects issues, controls, remediation activity, operational risk signals, and control implementation details. This role requires a strong combination of technology risk expertise, data and database understanding, control design and testing experience, and the ability to translate daily operational data into timely, decision-ready risk insight for multiple levels of management. The ideal candidate will have a strong understanding of SDLC, infrastructure, and cybersecurity risks and controls, along with hands-on experience in control automation, continuous control monitoring, risk analytics, and live dashboard development. Experience with large language models, AI agents, and intelligent automation is highly desirable as the organization advances toward more predictive, automated, and data-driven risk management.Key Responsibilities

  • Lead the design, development, and operationalization of a centralized IT risk and control database that serves as the authoritative source for IT issues, risks, controls, control implementation status, remediation activity, and supporting operational data.
  • Define the data model, taxonomy, metadata, lineage, and governance requirements needed to connect risks, controls, issues, incidents, metrics, assessments, audit findings, and remediation actions in a consistent and traceable manner.
  • Identify, ingest, and map risk signals from operational systems such as IT service management, change management, vulnerability management, incident management, project delivery, asset inventory, and control testing platforms.
  • Partner with technology, data architecture, cybersecurity, infrastructure, application development, operations, and risk stakeholders to ensure the risk database is scalable, sustainable, auditable, and aligned to enterprise risk and control frameworks.
  • Establish control implementation tracking capabilities, including control ownership, control design, operating effectiveness, evidence requirements, automation opportunities, and implementation milestones.
  • Drive the automation of control monitoring, control testing, risk assessments, evidence collection, issue tracking, and management reporting to reduce manual effort and improve timeliness, consistency, and accuracy.
  • Develop live dashboards and management reporting views tailored for technology teams, capability owners, senior IT leadership, risk committees, audit, regulatory stakeholders, and executive management.
  • Define and monitor key risk indicators, key control indicators, thresholds, trends, and early warning signals to support proactive risk identification, escalation, and decision-making.
  • Provide credible Line 1 risk challenge and advisory support across SDLC, infrastructure, cybersecurity, operational resilience, change management, access management, vulnerability management, data protection, and incident response controls.
  • Support RCSA, issue management, audit response, regulatory readiness, and remediation governance by ensuring risks, controls, issues, and evidence are clearly documented, linked, and defensible.
  • Evaluate opportunities to apply LLMs, AI agents, analytics, and intelligent automation to improve risk prioritization, control mapping, evidence review, issue classification, dashboard commentary, and predictive risk insight.
  • Represent IT Line 1 Risk in governance forums and communicate complex technology risk, control, and data issues in a clear, concise, and actionable manner for technical and non-technical audiences.

Required Qualifications

  • 10+ years of experience in technology risk, IT controls, cybersecurity risk, infrastructure risk, application risk, technology audit, or a related discipline within a complex technology or financial services environment.
  • Strong understanding of technology risk and control concepts across SDLC, infrastructure, cybersecurity, cloud, operational resilience, change management, access management, vulnerability management, incident management, and data protection.
  • Demonstrated experience designing, implementing, assessing, or overseeing technology controls and control remediation in audit, regulatory, or highly governed environments.
  • Strong database and data management understanding, including data modeling, relational data structures, metadata, data quality, lineage, integration, reporting layers, and governance practices.
  • Experience building or partnering on risk, control, issue, or operational data repositories that aggregate information from multiple technology and risk systems.
  • Experience with control automation, continuous control monitoring, control testing, evidence automation, and reporting automation.
  • Ability to define, interpret, and communicate KRIs, KCIs, KPIs, thresholds, trends, and out-of-tolerance conditions to support effective risk management decisions.
  • Experience creating live dashboards and executive reporting using tools such as Power BI, Tableau, ServiceNow reporting, Archer reporting, or similar analytics and visualization platforms.
  • Strong analytical, problem-solving, and data interpretation skills with the ability to convert operational data into actionable risk insight.
  • Excellent stakeholder management, communication, and influencing skills, with the ability to work across technology, risk, audit, cybersecurity, data, and senior management teams.
  • Strong governance mindset, documentation discipline, and ability to maintain audit-ready and regulator-ready evidence, traceability, and rationale.

Preferred Qualifications

  • Experience in financial services, clearing, settlement, payments, banking, insurance, or another highly regulated industry.
  • Familiarity with enterprise GRC platforms such as Archer, ServiceNow GRC/IRM, or similar risk and control management platforms.
  • Experience with AI, machine learning, large language models, AI agents, or intelligent automation applied to risk management, controls testing, evidence review, data classification, or management reporting.
  • Knowledge of cloud risk, DevSecOps, policy-as-code, CI/CD controls, secure SDLC, and automated control gates within the technology delivery lifecycle.
  • Familiarity with regulatory expectations and industry frameworks related to technology risk, cybersecurity, operational resilience, and controls management.
  • Experience leading cross-functional transformation initiatives involving data architecture, automation, risk governance, and executive reporting.

Critical Capabilities for Success

  • Technology Risk Depth: Understands how failures across SDLC, infrastructure, cybersecurity, and operations translate into business, regulatory, and operational risk.
  • Data and Database Orientation: Can define the structure, relationships, and governance needed to create a trusted risk and control data foundation.
  • Controls and Automation Expertise: Knows how to design, test, monitor, and automate controls across technology processes and platforms.
  • Dashboard and Reporting Acumen: Can translate complex risk data into live, intuitive dashboards and management-ready insights.
  • Execution Leadership: Can stand up a new capability, manage ambiguity, drive cross-functional alignment, and deliver measurable outcomes.
  • Innovation Mindset: Understands how AI, LLMs, and agents can be responsibly applied to improve risk intelligence, control monitoring, and operational efficiency.

Measures of Success

  • Authoritative IT risk and control database established with defined taxonomy, ownership, data lineage, and governance.
  • Risks, controls, issues, incidents, remediation actions, metrics, and evidence are consistently mapped and traceable.
  • Operational risk signals are ingested from key source systems and converted into meaningful KRIs, KCIs, trends, and alerts.
  • Live dashboards are available for multiple management levels and provide timely, accurate, and decision-ready risk insight.
  • Control automation and continuous monitoring reduce manual effort and improve the quality, timeliness, and defensibility of risk reporting.
  • Risk assessments, issue management, audit responses, and regulatory reporting are better supported through consistent data, evidence, and control traceability.
  • AI and automation opportunities are identified and responsibly implemented to enhance predictive risk intelligence and operational efficiency.

Skills and Requirements – add details here

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against 247Hire's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on 247Hire's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    247Hire's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.