VP Technology Risk & Application Assessment (Second Line Function)

Role Summary – Technology Risk & Application Assessment (Second Line Function)

Core Responsibilities

Perform applicationlevel risk assessments using established frameworks.

Evaluate applications across key dimensions:

o Availability (resiliency, recovery time objectives – e.g., under 2 hours RTO).

o Confidentiality (security, identity, access management).

o Data Integrity (accuracy and reliability of information).

Conduct independent technology risk reviews and challenge frontline teams rather than executing controls directly.

Assess whether risks are high or low, and confirm if controls are effective.

Provide oversight as part of the second line of defense.

Domain & Functional Knowledge

Strong familiarity with industry control frameworks (NIST 853, mappings).

Knowledge of financial services risk practices and regulatory compliance.

Ability to implement, maintain, and assess controls within the risk management lifecycle.

Preferred exposure to frontline technology functions such as:

o Application architecture (mapping business requirements to technologies).

o Software development and app dev lifecycle.

o IT infrastructure support, logging, capacity sizing.

o Cybersecurity and resilience planning.

Audit background acceptable, but frontline risk/technology experience is valued more

Job Requirements :

• 10-20 years of experience in IT risk management or a related field.
• Strong understanding of application assessment, application security, infrastructure security, reviewing second line of defense reviews.
• Proven track record in developing and implementing successful risk control frameworks.