ZipRecruiter

Log In

1

Senior Technology Risk Management Jobs in California

Viasat, Inc.

Senior Analyst, IT Risk & GRC

Carlsbad, CA · On-site

What you'll do The IT Risk Senior Analyst is a strategic advisor responsible for integrating IT risk management and compliance into enterprise technology transformation initiatives. This role ensures ...

Intuit

Lead, IT SOX Risk Advisory

San Diego, CA · On-site

This is a high-impact individual contributor role, reporting to the Senior Manager, SOX Technology Risk Advisory. As an IT SOX Lead Risk Advisor, you will be a trusted partner to our cross-functional ...

Intuit

Lead, IT SOX Risk Advisory

Mountain View, CA

This is a high-impact individual contributor role, reporting to the Senior Manager, SOX Technology Risk Advisory. As an IT SOX Lead Risk Advisor, you will be a trusted partner to our cross-functional ...

Intuit

Lead, IT SOX Risk Advisory

San Diego, CA · On-site

This is a high-impact individual contributor role, reporting to the Senior Manager, SOX Technology Risk Advisory. As an IT SOX Lead Risk Advisor, you will be a trusted partner to our cross-functional ...

next page

Showing results 1-20

All JobsTechnology Risk Management JobsSenior Technology Risk Management JobsSenior Technology Risk Management Jobs in California

Senior Technology Risk Management information

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in California?

The most popular types of Technology Risk Management jobs in California are:

What are popular job titles related to Senior Technology Risk Management jobs in California?

For Senior Technology Risk Management jobs in California, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in California look for?

The top searched job categories for Senior Technology Risk Management jobs in California are:

What cities in California are hiring for Senior Technology Risk Management jobs?

Cities in California with the most Senior Technology Risk Management job openings:

Senior Technology Risk Management jobs near you

Sr. Risk Operation Analyst - Integrated Risk Management "IRM"

Hyundai Autoever America

Irvine, CA • On-site

Full-time

Re-posted 11 days ago

Job description

Integrated Risk Management, Sr. Risk Operations Analyst
Location – Irvine, CA
Company Overview 
Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.
If you’re passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that’s driving the future of automotive innovation.
 
What You Will Be Doing
The Risk Operations Senior Analyst plays a critical role within the Integrated Risk Management team, supporting the CISO organization by operating and continuously improving core technology risk processes. This role is responsible for maintaining the technology control library, policies, and standards, and for executing risk operations including Technology Risk Assessments, Risk Issue Management, and Risk Exception Management.
The role also owns risk data integrity and reporting, producing dashboards and insights that track remediation progress, risk posture, and control effectiveness across the organization.
This position requires a blend of risk expertise, operational rigor, stakeholder management, and strong analytical and reporting skills. The key responsibilities of this role are as described below:
Technology Control Framework & Documentation
  • Maintain and evolve the enterprise technology control library, ensuring alignment with internal policies, standards, and external frameworks (e.g., NIST CSF 2.0, ISO 27001, CIS).
  • Own the lifecycle management of technology risk policies and standards, including updates, reviews, approvals, and communications.
  • Ensure controls, policies, and standards are clearly mapped to regulatory, legal, and business requirements.

Risk Operations Execution
  • Run and continuously improve core Risk Operations processes, including:
    • Technology Risk Assessments (consistently assessing the inherent risk, control effectiveness within the environment )
    • Risk Issue Management (identification, validation, remediation tracking, closure)
    • Risk Exception Management (intake, assessment, approvals, renewals, expirations)
  • Ensure risk processes are executed consistently, on time, and in accordance with defined methodologies.
  • Act as a subject matter expert for risk process guidance to technology, security, and business teams.

Risk Tracking, Reporting & Dashboards
  • Design, build, and maintain risk dashboards and reporting that provide transparency into:
    • Open risk issues and remediation status
    • Exception volumes, aging, risk aggregation and trends
    • Risk assessment outcomes and key risk indicators (KRIs)
  • Translate risk data into meaningful insights for senior leadership, customers and risk committees.
  • Ensure accuracy, completeness, and audit-readiness of risk data across systems.

Stakeholder & Governance Engagement
  • Partner closely with Customers, Senior and Executive Leaders, Legal and other groups, to drive timely remediation and risk ownership.
  • Support internal and external audits, regulatory inquiries, and risk governance forums with clear documentation and reporting.

Process Improvement & Tooling
  • Identify opportunities to streamline and automate risk operations workflows.
  • Support enhancements to GRC and risk tooling, including requirements definition, testing, and adoption.
  • Contribute to the maturation of the Integrated Risk Management operating model.

Basic Qualifications:
  • Experience: 7+ years of experience in Technology Risk, Cyber Risk, GRC, or IT Risk Management. Hands-on experience running technology risk assessments, issue management, exception processes and maintaining control libraries, policies, and standards. Familiarity with GRC platforms.
  • Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer science or a related field.
  • Technical Expertise: Strong knowledge of technology control frameworks (e.g., NIST CSF/800-53, ISO 27001, CIS). Proven ability to create risk dashboards and executive-level reporting. Strong analytical, documentation, and process design skills
  • Language Skills: Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination.

Preferred Qualifications:
  • Experience: Team leadership experience working within a CISO organization or large enterprise technology environment.  Implementation or maintenance experience with GRC platforms. 5+yrs experience in a top tier professional services firm, performing technology audit and/or risk management engagements.
  • Education and Certifications: Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly desirable.
  • Language Skills: Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication.

Team Culture:
The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.
Base Salary Range: $120,000 - $170,000
Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws. Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.

Powered by JazzHR

1wu1fqDvgb