1

Director Technology Risk Management Jobs in California

Partner closely with Legal, HR, IT, Finance, and Operations leadership to guide risk-related ... Lead renewal strategies, negotiations, and claims management with brokers and carriers. * Analyze ...

IT Director - Technology Services Fulltime role Location California (Hybrid - Up to 4 days remote ... Establish and maintain cybersecurity governance, risk management, vulnerability management, and ...

IT Risk Analyst

San Diego, CA · On-site

$79.10K - $102.35K/yr

Position Summary The position of IT Risk Analyst is responsible for participating in IT compliance and risk management initiatives. The candidate should demonstrate a basic understanding of IT risk, ...

New

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth ... risk management and operational oversight * Perform related duties as assigned or directed by ...

IT Risk & Compliance Analyst

San Francisco, CA · On-site

$110.70K - $111.30K/yr

... directed, and identifying opportunities for improvements in reporting and in using automation ... Manage the LogicGate Governance Library ensuring Information Security and Technology documents ...

next page

Showing results 1-20

Director Technology Risk Management information

What are the key skills and qualifications needed to thrive as a Director of Technology Risk Management, and why are they important?

To excel as a Director of Technology Risk Management, a strong background in information security, risk assessment, regulatory compliance, and a relevant degree such as in computer science or information systems is essential. Familiarity with risk management frameworks (such as NIST, ISO 27001), GRC (Governance, Risk, and Compliance) platforms, and certifications like CISSP or CISM are commonly required. Leadership, strategic thinking, and effective communication skills are vital for driving risk initiatives and collaborating across business units. These competencies ensure robust risk mitigation, regulatory adherence, and alignment of technology strategies with organizational goals.

How does a Director of Technology Risk Management typically collaborate with other departments to ensure effective risk mitigation?

A Director of Technology Risk Management works closely with IT, compliance, legal, and business operations teams to identify and address technology risks. This involves leading cross-functional risk assessments, facilitating communication between technical and non-technical stakeholders, and ensuring that risk mitigation strategies align with organizational goals. Regular meetings, workshops, and reporting structures are established to maintain transparency and drive a culture of risk awareness across departments. Effective collaboration is essential for implementing controls and responding proactively to emerging threats.

What does a Director of Technology Risk Management do?

A Director of Technology Risk Management is responsible for identifying, assessing, and mitigating technology-related risks within an organization. They develop and implement policies, frameworks, and strategies to ensure that IT systems and processes comply with regulatory requirements and best practices. Their work helps protect the company's data, assets, and reputation from threats such as cyberattacks, data breaches, and system failures. They also collaborate with other departments to promote a culture of risk awareness and provide guidance on risk-related matters.

What is the difference between Director Technology Risk Management vs Cybersecurity Manager?

AspectDirector Technology Risk ManagementCybersecurity Manager
Primary FocusOverseeing technology risk strategies and enterprise risk mitigationManaging cybersecurity operations and security measures
CertificationsCRISC, CISSP, CISMCISSP, CISA, CEH
Work EnvironmentStrategic, cross-departmental, executive levelOperational, technical teams, security operations centers
Industry UsageFinancial, healthcare, large enterprisesIT security firms, corporate IT departments

The main difference is that the Director Technology Risk Management focuses on broad technology risk strategies across the organization, while the Cybersecurity Manager concentrates on implementing and managing cybersecurity measures. Both roles require similar certifications but differ in scope and strategic versus operational responsibilities.

What are the most commonly searched types of Technology Risk Management jobs in California? The most popular types of Technology Risk Management jobs in California are:
What are popular job titles related to Director Technology Risk Management jobs in California? For Director Technology Risk Management jobs in California, the most frequently searched job titles are:
What job categories do people searching Director Technology Risk Management jobs in California look for? The top searched job categories for Director Technology Risk Management jobs in California are:
What cities in California are hiring for Director Technology Risk Management jobs? Cities in California with the most Director Technology Risk Management job openings:
10876 - Technology Risk Manager - Integrated Risk Management "IRM"

10876 - Technology Risk Manager - Integrated Risk Management "IRM"

Hyundai Autoever America

Irvine, CA • On-site

Full-time

Posted 12 days ago


Job description

Integrated Risk Management, Technology Audit Manager
Location - Irvine, CA

Company Overview
Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you'll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations.
If you're passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that's driving the future of automotive innovation.
What You Will Be Doing
The Technology Risk Manager is responsible for end-to-end coordination and execution support of all internal and external security related audits. This role acts as the central point of accountability for audit facilitation-ensuring audits are properly scoped, resourced, executed, and closed, while integrating audit outcomes seamlessly into established risk operations processes.
This role requires exceptional organizational discipline, stakeholder engagement, and a strong understanding of technology risk, audit lifecycles, and governance expectations. The Technology Audit Manager ensures transparency, consistency, and efficiency across the audit journey, while minimizing disruption to delivery teams and maximizing audit quality. The key responsibilities of this role are as described below:
Audit Planning & Intake
  • Serve as the single point of coordination for all internal and external security related audits.
  • Facilitate audit intake, ensuring audits are:
    • Clearly scoped
    • Appropriately prioritized
    • Aligned with business, regulatory, and risk objectives
  • Identify and confirm audit stakeholders, control owners, and subject matter experts across the environment.
  • Partner with relevant stakeholders to ensure agreement and understanding of audit scope, objectives, timelines, and dependencies.

Audit Execution & Coordination
  • Coordinate audit activities across all phases, including:
    • Planning
    • Fieldwork
    • Evidence collection
    • Issue validation
    • Reporting
  • Ensure audits are properly staffed, with clear accountability for evidence production and responses.
  • Track audit requests, evidence submissions, and auditor inquiries to ensure timely and complete responses.
  • Proactively manage risks, bottlenecks, and dependencies that may impact audit timelines or quality.

Stakeholder Engagement & Communication
  • Drive continuous stakeholder engagement throughout the audit lifecycle.
  • Ensure all stakeholders:
    • Understand audit scope and expectations
    • Are informed of progress, risks, and upcoming milestones
    • Receive timely communication on changes or escalations
  • Facilitate status updates, checkpoints, and working sessions with auditors and internal teams.
  • Act as a trusted liaison between auditors and the Security organization, balancing transparency with control.

Findings Management & Risk Integration
  • Coordinate the intake, review, and validation of audit findings.
  • Ensure audit findings are:
    • Clearly understood and accurately documented
    • Mapped to relevant controls, policies, and standards
    • Integrated into Risk Issue Management processes
  • Partner with Risk Operations to ensure:
    • Findings are appropriately risk-rated
    • Remediation plans are defined, owned, and tracked
    • Closure evidence meets audit and risk standards

Governance, Reporting & Continuous Improvement
  • Maintain centralized audit tracking and documentation, ensuring audit readiness and traceability.
  • Produce audit status reporting for the Senior Leadership, Customers, and relevant governance forums.
  • Identify trends, recurring issues, and systemic control gaps across audits.
  • Recommend process improvements to reduce audit friction and improve audit outcomes over time.

Basic Qualifications:
  • Experience: 10+ years of experience in technology audit coordination, Technology Risk, GRC, IT Audit, or Compliance. Hands-on experience supporting internal and/or external audits in a technology or security environment. Proven ability to manage complex, cross-functional stakeholder environments. Familiarity with GRC platforms.
  • 3-5 years of people leadership experience managing and developing high-performing teams in a professional environment.
  • Education: Bachelor's degree in Cybersecurity, Information Technology, Computer science or a related field.
  • Technical Expertise: Strong understanding of audit lifecycles, control testing, and issue management with strong knowledge of technology control frameworks (e.g., NIST CSF/800-53, ISO 27001, CIS). Exceptional organizational, tracking, and communication skills.
  • Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination.

Preferred Qualifications:
  • Experience: Audit or assessment leadership experience working within a CISO organization or large enterprise technology environment. 7+yrs experience in a top tier professional services firm, leading and delivering technology audit and/or risk management engagements.
  • Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as CISSP, CISM, CRISC, or CIA are highly desirable.
  • Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication.

Team Culture:
The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.
Base Salary Range: $150,000 - $185,000
Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws. Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.