ZipRecruiter

Log In

1

Senior Technology Risk Management Jobs in Colorado

PNC Bank

LOB Risk Lead

Arvada, CO

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

As a LOB Risk Lead - Technology Risk Quantification, you will serve as the senior risk leader responsible for establishing and overseeing quantitative technology risk management practices within the ...

Asurion

Director, Cyber Risk

Sterling, CO

Position Overview The Director, Cyber Risk leads Asurion's cyber and technology risk management ... Operationalize the risk appetite and tolerance framework with the CISO and senior leadership; own ...

Munich RE

Cyber and Tech Risk UW SR

Denver, CO · On-site

$101K - $119K/yr

  • Medical

  • Life

  • Retirement

  • PTO

This role builds and manages strong broker relationships, provides market insight in a rapidly evolving cyber risk landscape, and positions the organization as a leader in the primary cyber market.

Munich Re

Cyber and Tech Risk UW SR

Arvada, CO · On-site +1

$100K - $119K/yr

  • Medical

  • Life

  • Retirement

  • PTO

Our cyber offerings are supported by proactive risk management services and data driven insights ... Position will be Remote - US based About the Role The Senior Cyber & Technology Risk Underwriter is ...

Crowe LLP

Risk Technology Consultant

Denver, CO · On-site

Analyze business, risk, compliance, audit, security, and technology processes to identify ... Evaluate technology processes such as change management, logical access, IT operations, system ...

New

SOLV Energy, LLC

Director, Risk Management

Denver, CO · On-site

$169.48 - $203.38/hr

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Present joint Risk/Safety loss analyses to senior leadership on a regular basis, including lagging ... Technology: Proficiency with risk management information systems (RMIS), claims management ...

SOLV Energy

Director, Risk Management

Denver, CO · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

Establish and track key risk indicators (KRIs) and present regular risk dashboards to senior ... Technology:Proficiencywith risk management information systems (RMIS), claims management platforms ...

Prologis, Inc.

Risk Management Analyst

Denver, CO · On-site

$75K - $110K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

This role offers broad exposure across corporate risk management and opportunities to improve analysis and workflow efficiency through emerging technology and automation. This role can be based out ...

Prologis

Risk Management Analyst

Denver, CO · On-site

$75K - $110K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

This role offers broad exposure across corporate risk management and opportunities to improve analysis and workflow efficiency through emerging technology and automation. This role can be based out ...

Prologis

Risk Management Analyst

Denver, CO · On-site

$75 - $110/hr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

This role offers broad exposure across corporate risk management and opportunities to improve analysis and workflow efficiency through emerging technology and automation.This role can be based out of ...

next page

Showing results 1-20

All JobsTechnology Risk Management JobsSenior Technology Risk Management JobsSenior Technology Risk Management Jobs in Colorado

Senior Technology Risk Management information

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in Colorado?

The most popular types of Technology Risk Management jobs in Colorado are:

What are popular job titles related to Senior Technology Risk Management jobs in Colorado?

For Senior Technology Risk Management jobs in Colorado, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in Colorado look for?

The top searched job categories for Senior Technology Risk Management jobs in Colorado are:

What cities in Colorado are hiring for Senior Technology Risk Management jobs?

Cities in Colorado with the most Senior Technology Risk Management job openings:

Senior Technology Risk Management jobs near you
Infographic showing various Senior Technology Risk Management job openings in Colorado as of August 2026, with employment types broken down into 33% As Needed, and 67% Full Time. Highlights an 100% In-person job distribution.

Senior Technology & Business Risk Manager

Biodesix, Inc.

Louisville, CO

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 2 days ago

New

Job description

Senior Technology amp; Business Risk Manager
ABOUT US:
Biodesix is a leading diagnostic solutions company, driven to improve clinical care and outcomes for patients. Biodesix Diagnostic Tests support clinical decisions to expedite personalized care and improve outcomes for patients with lung disease. Biodesix Development Services enable the world’s leading biopharmaceutical, life sciences, and research institutions with scientific, technological, and operational capabilities that fuel the development of diagnostic tests, tools, and therapeutics.
Our Mission: Transform patient care and improve outcomes through personalized diagnostics that are timely, accessible, and address immediate clinical needs.
Our Vision: A world where patient diseases are conquered with the guidance of personalized diagnostics.
For more information, please visit www.biodesix.com.
LOCATION:
On-Site in Louisville, CO

THE ROLE:
The Senior Technology amp; Business Risk Manager is responsible for leading enterprise technology risk management, business continuity, governance, compliance coordination, and operational resilience activities across the organization. This role oversees risk assessment processes, business continuity planning, control governance, third-party risk management, audit readiness, and technology risk initiatives that support business operations, cybersecurity objectives, regulatory compliance, and organizational growth. The position partners closely with Infrastructure Engineering, Cybersecurity, Software Development, Business Intelligence, Compliance, Legal, Quality, and business stakeholders to ensure risks are identified, evaluated, communicated, and appropriately mitigated. This position is designed for a hands-on technology risk leader capable of assessing cybersecurity, infrastructure, operational, and business risks while helping mature enterprise governance, risk management, and operational resilience programs. The successful candidate must be comfortable operating in a highly technical environment and actively participating in risk assessments, audits, technology reviews, business continuity planning, vendor risk evaluations, control design discussions, and operational resilience initiatives.
WHAT YOU'LL DO:
Enterprise Risk Management amp; Governance
  • Lead enterprise-wide risk identification, assessment, prioritization, mitigation, and reporting activities across technology and business domains.
  • Maintain and continuously improve the enterprise risk register, risk methodologies, scoring models, and governance processes
  • Facilitate cross-functional risk assessments involving cybersecurity, infrastructure, applications, cloud technologies, data protection, operational processes, and third-party services
  • Establish risk metrics, key risk indicators (KRIs), dashboards, and executive reporting processes.
  • Coordinate risk review activities with business leaders and IT stakeholders to ensure risk ownership and mitigation accountability
  • Support risk-informed decision-making throughout technology and business initiatives
  • Partner with business leaders to identify, assess, and monitor operational, strategic, regulatory, and enterprise risks beyond traditional technology domains
  • Drive enterprise risk governance through regular risk reviews, executive reporting, and cross-functional governance committees
Technology Risk amp; Cybersecurity Governance
  • Partner with Infrastructure Engineering and Cybersecurity teams to evaluate technical risks, control effectiveness, and remediation strategies
  • Assess enterprise risks associated with emerging technologies, including Artificial Intelligence (AI), automation, cloud-native platforms, and evolving digital capabilities
  • Support governance activities aligned with NIST CSF, NIST RMF, ISO 27001, SOC 2, HIPAA, SOX and related frameworks
  • Assist with root cause analysis, risk investigations, control reviews, and corrective action planning
  • Conduct and lead technology risk assessments involving infrastructure, cloud services, enterprise applications, identity and access management, cybersecurity controls, endpoint technologies, and operational technology environments
  • Stay current with emerging cybersecurity threats, regulatory developments, risk management practices, and technology trends
Business Continuity amp; Operational Resilience
  • Lead development and continuous improvement of the Business Continuity Program
  • Conduct Business Impact Assessments (BIAs) and recovery planning activities across business functions
  • Coordinate tabletop exercises, continuity testing, and resilience validation activities
  • Partner with Infrastructure and Security teams to ensure Disaster Recovery capabilities support business recovery objectives
  • Evaluate operational resiliency risks involving critical business processes, vendors, and technology dependencies
  • Support incident response reviews and lessons-learned activities following significant operational disruptions
  • Coordinate responses to customer security questionnaires, technology due diligence activities, and third-party assurance requests
Compliance, Audit amp; Third-Party Risk
  • Coordinate readiness activities for internal and external audits including SOC 2, HIPAA, ISO 27001, SOX, and related assessments
  • Partner with business and IT teams to collect audit evidence, validate controls, and track remediation activities
  • Support vendor risk assessments, third-party reviews, and ongoing vendor monitoring activities
  • Assist with policy development, control governance, and risk-related training initiatives
  • Monitor evolving regulatory requirements impacting technology, cybersecurity, privacy, and operational risk programs
  • Maintain documentation supporting governance, compliance, continuity, and risk management activities
  • Partner with Finance, Internal Audit, and business stakeholders to support SOX IT General Controls (ITGCs), application controls, control testing, remediation activities, and audit readiness efforts
  • Evaluate technology, cybersecurity, and operational control effectiveness and recommend improvements to reduce organizational risk exposure
Operational Governance amp; Leadership
  • Drive maturity improvements across enterprise risk, business continuity, and governance programs
  • Develop and maintain risk management procedures, methodologies, standards, and documentation
  • Drive accountability through governance reviews, risk reporting, mitigation tracking, and issue escalation processes
  • Support audit readiness and control effectiveness activities within regulated environments
  • Provide enterprise leadership by influencing cross-functional teams, facilitating governance forums, and driving accountability for organizational risk management activities
  • Foster a collaborative, risk-aware, and business-focused culture across the organization
  • Oversee the enterprise technology policy governance process, including policy lifecycle management, periodic reviews, and alignment with regulatory and business requirements
WHAT YOU'LL BRING:
  • Bachelor's degree in Information Technology, Information Systems, Cybersecurity, Computer Science, Engineering, Risk Management, or related technical field
  • 8+ years of progressive experience in IT Risk Management, Cybersecurity Governance, Enterprise Risk Management, Information Security, Internal IT Audit, GRC, or related disciplines
  • 5+ years of leadership experience leading enterprise risk, cybersecurity governance, business continuity, compliance, or technology risk programs
  • Experience conducting enterprise technology risk assessments and control evaluations
  • Demonstrated experience assessing enterprise technology environments, including infrastructure, cloud platforms, cybersecurity technologies, identity and access management, endpoint technologies, and enterprise applications
  • Experience implementing or supporting frameworks such as NIST CSF, NIST RMF, ISO 27001, COBIT, SOX ITGC, HIPAA Security Rule, SOC 2, HITRUST, or similar frameworks
  • Demonstrated ability to lead enterprise risk management, business continuity, governance, or cybersecurity risk programs
  • Strong organizational skills and ability to balance strategic planning with hands-on execution
  • Experience influencing business and technology leaders regarding risk decisions
  • Strong analytical and problem-solving capabilities involving technology, cybersecurity, operational, and business risks
  • Demonstrated understanding of enterprise infrastructure, cloud platforms, identity and access management, endpoint technologies, data protection, and cybersecurity controls
  • Comfortable participating in technical reviews, architecture discussions, risk assessments, and remediation planning
  • Ability to evaluate technical control effectiveness and communicate risk implications to leadership
  • Strong written and verbal communication skills with executive-level presentation abilities
  • Ability to communicate technical risk concepts to both technical and non-technical audiences
  • Collaborative mindset with the ability to influence stakeholders across multiple business functions
  • Experience operating within regulated or compliance-focused environments
  • Familiarity with healthcare, laboratory, biotechnology, or highly regulated industry frameworks
  • Experience presenting risk assessments and recommendations to executive leadership
  • CISSP, CISM, CRISC, CGRC, CISA, CBCP, PMP, or equivalent certifications, preferred
  • Experience with ServiceNow GRC, Archer, AuditBoard, Drata, or similar platforms, preferred
  • Experience within healthcare, diagnostics, biotechnology, pharmaceutical, or regulated industries, preferred
  • Experience supporting AI governance, AI risk management, or emerging technology oversight, preferred
​WHAT YOU'LL GET:
  • Annual Base Salary Range $145,000 - $160,000
  • Discretionary Bonus opportunity
  • Comprehensive health coverage: Medical, Dental, and Vision
  • Insurance: Short/Long Term Disability and Life Insurance
  • Financial benefits: 401(k), Flex Spending Account
  • 120 hours of annual vacation
  • 72 hours of paid sick time off
  • 11 paid holidays + 3 floating holidays
  • Employee Assistance Program
  • Voluntary Benefits
  • Employee recognition program
WHAT TO EXPECT IN THE INTERVIEW PROCESS:

We want you to have a clear view of the IT Operations amp; End User Services Manager role—and we want to get to know the real you. Our interview process is designed to be thorough, transparent, and give you direct insight into what it’s like to work here:

  1. Virtual Recruiter Screen – A conversation to understand your background, what motivates you, and where you're looking to grow.
  2. Hiring Manager Interview – A deeper discussion about your experience, skills, and approach.
  3. Final On-Site Interview – Tour our corporate headquarters; interview with additional members of the team to discuss alignment and fit.
Individual base compensation is based on various factors unique to each candidate, including skill set, experience, qualifications, and other job-related aspects.
Biodesix is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Apply