ZipRecruiter

Log In

1

Senior Technology Risk Management Jobs in California

MGO

Senior Consultant (IT Risk)

Los Angeles, CA · On-site +1

Overview Senior Consultant (IT Risk) USA: Los Angeles, CA | Hybrid At MGO (Macias, Gini & O'Connell ... Develop and implement IT risk management frameworks * Provide actionable recommendations to ...

MGO

Senior Consultant (IT Risk)

Los Angeles, CA · On-site

Overview Senior Consultant (IT Risk) USA: Los Angeles, CA | Hybrid At MGO (Macias, Gini & O'Connell ... Develop and implement IT risk management frameworks * Provide actionable recommendations to ...

MGO

Senior Consultant (IT Risk)

Los Angeles, CA · Hybrid

Senior Consultant (IT Risk) USA: Los Angeles, CA | Hybrid At MGO (Macias, Gini & O'Connell LLP), we ... Develop and implement IT risk management frameworks * Provide actionable recommendations to ...

Hyundai Autoever America

Risk Ops Analyst III

Irvine, CA · On-site

... Senior Analyst plays a critical role within the Integrated Risk Management team, supporting the CISO organization by operating and continuously improving core technology risk processes. This role is ...

Hyundai Autoever America

Risk Ops Analyst III

Irvine, CA · On-site

... Senior Analyst plays a critical role within the Integrated Risk Management team, supporting the CISO organization by operating and continuously improving core technology risk processes. This role is ...

AppFolio

Sr. Technology Auditor

San Diego, CA

$100K - $131K/yr

Experience: 4 to 7 years of progressive experience in IT audit, technology risk management, or ... into a business context for senior leadership. * Objective Reasoning: A proven ability to ...

AppFolio

Sr. Technology Auditor

San Diego, CA

$100K - $131K/yr

Experience: 4 to 7 years of progressive experience in IT audit, technology risk management, or ... into a business context for senior leadership. * Objective Reasoning: A proven ability to ...

AppFolio

CA

$110K - $145K/yr

Experience: 4 to 7 years of progressive experience in IT audit, technology risk management, or ... into a business context for senior leadership. * Objective Reasoning: A proven ability to ...

AppFolio, Inc.

Sr. Technology Auditor

Santa Barbara, CA · On-site +1

$104K - $137K/yr

Direct experience auditing or managing risk in a high-growth SaaS, FinTech, or technology-driven ... into a business context for senior leadership. * Objective Reasoning: A proven ability to ...

AppFolio

Sr. Technology Auditor

San Francisco, CA

$110K - $145K/yr

Experience: 4 to 7 years of progressive experience in IT audit, technology risk management, or ... into a business context for senior leadership. * Objective Reasoning: A proven ability to ...

next page

Showing results 1-20

All JobsTechnology Risk Management JobsSenior Technology Risk Management JobsSenior Technology Risk Management Jobs in California

Senior Technology Risk Management information

What does a technology risk manager do?

A technology risk manager identifies, assesses, and mitigates risks related to information technology and cybersecurity within an organization. They develop policies, implement controls, and monitor systems to ensure data security and compliance, often using tools like risk assessment frameworks and security protocols. Strong analytical skills and knowledge of industry standards such as ISO 27001 or NIST are essential for this role.

How much does a senior technology risk analyst make at Fidelity?

A senior technology risk analyst at Fidelity typically earns between $90,000 and $130,000 annually, depending on experience, location, and certifications. The role often requires knowledge of risk assessment tools and regulatory compliance standards.

What is the highest salary for a risk manager?

Senior Technology Risk Management professionals can earn salaries up to $150,000 or higher annually, depending on experience, certifications, and the size of the organization. Top earners in this field often have advanced skills in cybersecurity, compliance, and risk assessment, and may receive bonuses or other incentives.

How does a Senior Technology Risk Management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What are the key skills and qualifications needed to thrive as a Senior Technology Risk Management professional, and why are they important?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What is the highest paying risk management job?

In risk management, senior roles such as Chief Risk Officer (CRO) or Director of Risk Management tend to have the highest salaries, often exceeding six figures annually. These positions require extensive experience, advanced certifications like FRM or CRM, and strong leadership skills, especially in financial services, insurance, or large corporations.

What is Senior Technology Risk Management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.
What are the most commonly searched types of Technology Risk Management jobs in California? The most popular types of Technology Risk Management jobs in California are:
What are popular job titles related to Senior Technology Risk Management jobs in California? For Senior Technology Risk Management jobs in California, the most frequently searched job titles are:
What job categories do people searching Senior Technology Risk Management jobs in California look for? The top searched job categories for Senior Technology Risk Management jobs in California are:
What cities in California are hiring for Senior Technology Risk Management jobs? Cities in California with the most Senior Technology Risk Management job openings:
Senior Technology Risk Management jobs near you

Senior Technology Risk Advisor (Applications, Platforms & Data)

GHD Group

Irvine, CA • On-site

$145K - $146K/yr

Full-time

Retirement, PTO

Re-posted 14 days ago

Job description


At GHD, we don't just believe in the power of commitment, we live and breathe it every day.
That's why we pledge to support and empower all of our people to make a positive impact when working hand in hand with our business to drive change. We'll help you accelerate your career and empower you with the right technology and training as you bring ideas and projects to life.
Who are we looking for?
Are you a second-line technology risk and control assurance specialist who provides independent oversight of controls, rather than building or operating them and can challenge, test and mature a control environment? We're seeking an experienced Senior Technology Risk Advisor (Applications, Platforms & Data) to provide independent, second-line (2LoD) assurance across application platforms, data and AI services, software development, domain and DNS management, and the online and web ecosystem, strengthening the control environment that protects GHD and its clients.
In this senior, independent advisory role, you'll partner with and constructively challenge technology leaders, platform owners and governance stakeholders to assess control design and operating effectiveness, govern remediation to closure, and deliver insights that support informed, risk-based decisions across the business.
As a senior technology risk professional, you will:
  • Lead risk-based assurance reviews across application platforms, data, AI services, web technologies, and software development environments
  • Assess the design and effectiveness of technology controls and identify opportunities to strengthen risk management practices
  • Develop and maintain technology control frameworks aligned with industry standards and regulatory requirements
  • Conduct thematic reviews on topics such as AI governance, data access controls, software development practices, web application security, and DNS/domain management
  • Partner with technology teams to embed controls by design and improve operational resilience
  • Validate evidence, manage findings, track remediation activities, and escalate material risks when required
  • Deliver executive-level reporting, including control effectiveness ratings, risk heat maps, key risk indicators, trend analysis and material issues for senior leadership and governance committees
  • Support client assessments, audits, and compliance activities with defensible evidence and subject matter expertise
  • Provide second-line oversight of AI risk management, data protection controls, and technology governance initiatives
  • Monitor emerging regulatory requirements and industry trends, ensuring the control environment evolves appropriately

What You'll Bring
We're looking for an independent, second-line mindset, someone who pairs control assurance rigour with enough technical understanding of application, data, AI, web and platform environments to challenge first-line teams credibly, communicate clearly with executives, and drive remediation.
You'll be a strong fit if you've owned or independently assured a gated secure development lifecycle (SDLC) control framework, including threat modelling, secure pipelines, software bill of materials (SBOM), static testing and dynamic testing, and can challenge delivery teams on control evidence across cloud, container and SaaS platforms.
It's likely not a fit if your background is primarily hands-on security engineering, software development, or one-off internal audit.
Required Experience
  • 5 to 10 years in technology or IS risk and control assurance, including demonstrable second-line independent assurance over technology control environments, as distinct from first-line security operations or one-off internal audit
  • Experience designing, testing, or assessing technology controls and risk management frameworks
  • Strong knowledge across application, platform, data, cloud, and web and DNS environments, with the ability to assess and challenge controls without needing to operate them
  • Experience working with executive stakeholders and presenting complex information in a clear, actionable way
  • Demonstrated ability to manage multiple assurance activities and drive remediation outcomes

Technical Knowledge
Experience with some or all of the following is highly desirable:
  • ISO/IEC 27001 and 27002
  • NIST frameworks and security controls
  • CMMC and client security requirements
  • Risk and control assurance methodologies
  • Data governance and protection controls
  • AI governance and model risk management
  • Software development lifecycle (SDLC) controls
  • Web application and digital platform security
  • Domain, DNS, and online ecosystem governance

Qualifications
  • Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, or a related field
  • Relevant certifications such as CRISC, CISA, CGRC, CISSP, or similar are advantageous

Benefits:
  • 401K - Employees are eligible to participate on the first day of the month following 3 months of service
  • Paid time off - Our PTO benefit is designed to provide eligible employees with a period of rest and relaxation, sick, and personal time throughout the year. PTO starts at 16 days per year and increases with years of service
  • Holiday Pay - Holiday pay is provided for eligible employees. GHD observes 9 holidays per year. Holiday pay will be based on the regular set schedule for the employee
  • Wellness Benefit- Regular full-term employees are eligible to participate in the wellness reimbursement program. GHD will reimburse 50% of the cost of the following to maximum of $250.00 reimbursement annually for such items as: Health club membership fees, Home exercise equipment purchases, Bicycles, Race, run & marathon entrance fees, Smoking cessation programs, Weight loss programs (i.e.-Weight Watchers, Jenny Craig), Fitbits and Fitness Tracking devices

Salary range: $87,97500 - $146,625.00 based on experience and location
Interested? Apply Now.
As a multicultural organization, we encourage individual achievement and recognize the strength of a diverse workforce. GHD is an equal opportunity employer. We provide equal employment opportunities to all qualified employees and applicants without regard to race, creed, religion, national origin, citizenship, color, sex, sexual orientation, gender identity, age, disability, marital status or veteran status.
#LI-JW1
About Us
Take on some of the world's toughest challenges - with GHD supporting you every step of the way.
We'll give you control over your career, empower you to find innovative solutions and help you create a lasting impact.
See where your commitment could take you with GHD.
Our Pledge to You
At GHD, we don't just believe in the power of commitment, we live and breathe it every day.
That's why we pledge to empower our people to make a positive impact. Combining our deep technical expertise with the capabilities of our clients and partners, we respond to some of the most complex challenges facing our planet today.
See where your commitment could take you.
That's the #PowerOfCommitment
Who we are
GHD is a global professional services company that leads through engineering, architecture, and construction expertise. We are an employee-owned company with over 11,000 diverse and skilled individuals, across more than 200 offices spanning five continents.
The Power of Commitment is our brand promise. It's what makes us different. We are bound to our stated vision and determination to address humanity's most urgent needs: to make water, energy and urbanisation sustainable for generations to come.

Apply