1

Senior Technology Risk Management Jobs in California

Discord's Internal Audit team exists to demonstrate effective risk management, process optimization ... Track remediation, coordinate with external auditors, and report to senior leadership What you ...

IT Auditor Sr

Irvine, CA · On-site

$101K - $132K/yr

Sr IT Auditor The Senior IT Auditor independently evaluates the adequacy and operating ... Understanding of IT Governance and IT Risk Management concepts. * Thorough knowledge of auditing ...

Partner closely with Legal, HR, IT, Finance, and Operations leadership to guide risk-related ... Serve as the primary advisor to senior leadership on all risk and insurance matters. * Lead, mentor ...

Analyze business, risk, compliance, audit, security, and technology processes to identify ... Evaluate technology processes such as change management, logical access, IT operations, system ...

Analyze business, risk, compliance, audit, security, and technology processes to identify ... Evaluate technology processes such as change management, logical access, IT operations, system ...

Analyze business, risk, compliance, audit, security, and technology processes to identify ... Evaluate technology processes such as change management, logical access, IT operations, system ...

Analyze business, risk, compliance, audit, security, and technology processes to identify ... Evaluate technology processes such as change management, logical access, IT operations, system ...

Discord's Internal Audit team exists to demonstrate effective risk management, process optimization ... Track remediation, coordinate with external auditors, and report to senior leadership What you ...

Showing results 41-60

Senior Technology Risk Management information

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in California?

The most popular types of Technology Risk Management jobs in California are:

What are popular job titles related to Senior Technology Risk Management jobs in California?

For Senior Technology Risk Management jobs in California, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in California look for?

The top searched job categories for Senior Technology Risk Management jobs in California are:

What cities in California are hiring for Senior Technology Risk Management jobs?

Cities in California with the most Senior Technology Risk Management job openings:

Technology Risk Audit Manager

San Francisco, CA • Hybrid

Discord
Software Development • 501 - 1,000 employees

$180K - $202K/yr

Full-time

Posted 26 days ago


Job description

Discord's Internal Audit team exists to demonstrate effective risk management, process optimization, and adherence to relevant regulations - through a mix of independent assurance and advisory work that helps teams strengthen our overall control environment. This Technology Risk Audit Manager role owns the technical side of that mission - IT SOX/ITGC, system controls, and domains centered around consumer trust - that protect hundreds of millions of our users worldwide. You'll have the opportunity to help build our internal audit function from the ground up: shaping the frameworks and processes with an AI-native approach from day one, rather than bolting AI on after the fact. Your first few months will focus on learning Discord's financial-reporting systems landscape, understanding the company's GRC program structure, and evaluating AI-powered testing solutions - setting the foundation for a function that's built to scale as Discord grows toward enterprise readiness. This person will report to the Vice President of Internal Audit.

What You'll Be Doing

  • Lead IT SOX/ITGC strategy and continuous improvement across financial-reporting-relevant systems
  • Extend risk and controls assessment and assurance into consumer trust domains such as privacy, security, and trust & safety
  • Partner with the Engineering organization to ensure proper access controls, segregation of duties, change management, and CI/CD integrity are in place
  • Guide control design through system implementations, migrations, and platform changes
  • Manage teams and projects related to IT controls and technical audits, including external contractors and/or internal teammates
  • Apply AI/automation tools to improve audit testing efficiency, anomaly detection, and control monitoring
  • Track remediation, coordinate with external auditors, and report to senior leadership

What you should have

  • Bachelor's degree in Information Systems, Computer Science, Accounting, or related field (or equivalent practical experience)
  • 8+ years in IT audit, risk management, or controls, spanning both financial (SOX/ITGC) and consumer trust domains (security, privacy, or trust & safety a plus)
  • Deep ITGC fundamentals - access management, change management, computer operations, and SDLC controls
  • SOX/ICFR knowledge and independent risk assessment methodology - able to scope an audit, identify key risks, and design test procedures rather than execute a checklist
  • Framework fluency across COSO, COBIT, and NIST CSF, applied appropriately by context
  • Proven external audit/co-source coordination experience, with a track record of driving remediation action plans through to closure
  • Hands-on experience applying AI or automation tools to audit processes, and strong communication skills translating technical risk for non-technical stakeholders

Bonus points

  • Consumer facing platform technology risk experience
  • Subscription and/or Ad Tech experience
  • Experience auditing homegrown systems and/or tools
  • AI governance experience
  • Third-party/vendor risk depth
  • Data privacy regulatory fluency
  • DevSecOps / CI-CD pipeline controls
  • CISA, CISSP, or CPA credential

Candidates must reside in or be willing to relocate to the San Francisco Bay Area (Alameda, Contra Costa, Marin, Napa, San Francisco, San Mateo, Santa Clara, Solano, and Sonoma counties). Relocation assistance may be available. For this role, the Hiring Manager would like folks to be in the office 1-2 days a week.

The US base salary range for this full-time position is $180,000 to $202,500 + equity + benefits. Our salary ranges are determined by role and level. Within the range, individual pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include equity, or benefits.