ZipRecruiter

Log In

1

Senior Technology Risk Management Jobs in Maryland

SC&H Group

Risk Senior Manager

Columbia, MD · On-site

... 42001 (AI Management System) readiness/certification guidance, and security program advisory ... Expand client relationships at the CISO, CIO, CTO, CAE, CFO levels; lead cross-sell with Assurance ...

Aegon

Sr Risk Manager, GRC Systems

Baltimore, MD · On-site

The Senior Risk Manager, GRC Systems, will play a pivotal role in shaping how operational risk ... Technology, Compliance, Finance, Audit and Risk professionals to enhance risk management ...

Autodesk

... senior risk professionals. Trust Risk at Autodesk is an established team and program. We are ... risk management program in a complex technology organization * 4+ years of experience managing ...

Deloitte

Senior Manager - ServiceNow

Baltimore, MD · On-site

... * IT Asset Management (ITAM) * Integrated Risk Management (IRM) * Security Operations (SecOps ... Work you'll do As a ServiceNow Senior Manager on the Cyber Strategy & Transformation team, you will ...

previous page

Showing results 41-60

All JobsTechnology Risk Management JobsSenior Technology Risk Management JobsSenior Technology Risk Management Jobs in Maryland

Senior Technology Risk Management information

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in Maryland?

The most popular types of Technology Risk Management jobs in Maryland are:

What are popular job titles related to Senior Technology Risk Management jobs in Maryland?

For Senior Technology Risk Management jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in Maryland look for?

The top searched job categories for Senior Technology Risk Management jobs in Maryland are:

Senior Technology Risk Management jobs near you
Infographic showing various Senior Technology Risk Management job openings in Maryland as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 11% Part Time, and 2% Contract. Highlights an 88% Physical, 3% Hybrid, and 9% Remote job distribution.

Risk Senior Manager

SC&H Group

Columbia, MD • On-site

Full-time

Medical, Retirement, PTO

Re-posted 25 days ago

Job description

SC&H's Risk Practice is seeking a Senior Manager to lead and grow our service line with a strong focus on security-related consulting, including SOC (SSAE 18), ISO/IEC 27001, and ISO/IEC 42001 engagements. The ideal candidate combines sales/business development acumen, team leadership, and deep delivery expertise to shape client outcomes, scale practices, and develop high-performing teams. This role includes measurable growth responsibilities, client oversight, and engagement leadership across highly regulated and high-growth industries.

Work You'll Do:

  • Business Development & Growth (40%)
    • Own a personal book-of-business growth target; lead opportunity pursuit from prospecting through close (RFPs, proposals, orals, scoping, pricing).
    • Build and manage an opportunity pipeline across SOC (1/2/3), readiness, ISO 27001 ISMS implementation/assessments, ISO 42001 (AI Management System) readiness/certification guidance, and security program advisory.
    • Develop go-to-market (GTM) offerings, thought leadership, and partner/alliances; collaborate with Marketing on campaigns and events.
    • Expand client relationships at the CISO, CIO, CTO, CAE, CFO levels; lead cross-sell with Assurance, Tax, and other Cyber/Technology teams.
  • Engagement Leadership & Delivery (40%)
    • Lead SOC (SSAE 18) readiness and examination projects (SOC 1 Type 1/2, SOC 2 Type 1/2, SOC 3), including scoping, testing strategy, and report quality.
    • Lead ISO/IEC 27001 implementations (ISMS design, risk assessment, controls, internal audits, certification readiness) and ISO/IEC 42001 readiness/implementation for AI governance.
    • Oversee delivery quality, risk, and timelines across multiple concurrent engagements; ensure methodology compliance and audit defensibility.
  • People Leadership & Practice Management (20%)
    • Manage, coach, and develop a team of managers/ seniors/ associates; lead staffing, utilization, and performance.
    • Champion a collaborative, inclusive, and learning-oriented culture; provide timely feedback and career guidance.
    • Strengthen delivery playbooks, templates, and accelerators; contribute to practice P&L hygiene (pricing discipline, margin, WIP/AR, scope management).

Qualifications

  • Required
    • 8–12+ years of progressively responsible experience in public accounting, consulting, or a comparable risk/security practice.
    • Proven track record in SOC (SSAE 18) readiness and examinations (SOC 1/SOC 2), including planning, testing, supervision, and reporting.
    • Hands-on experience with ISO/IEC 27001 (ISMS design/implementation, internal audit, certification readiness) and familiarity with ISO/IEC 42001 (AI Management System) frameworks and AI governance concepts.
    • Demonstrated sales/business development success (pipeline creation, proposals/orals, solutioning, closing) and account growth.
    • People leadership experience: managing teams, setting priorities, and developing talent across multiple engagements.
    • Strong understanding of security and IT risk domains (identity and access, change/configuration, secure engineering, vendor risk, cloud controls, incident response, logging/monitoring, data governance, AI governance).
    • Excellent client communication, executive presence, and stakeholder management skills.
    • Prior practice-building responsibilities (offerings, pricing models, partner alliances).
  • Preferred
    • Experience coordinating with external auditors and working in regulated industries (SaaS, fintech, healthcare, critical infrastructure).
    • Working knowledge of cloud security (Azure, AWS, GCP) and enabling platforms (e.g., M365/Entra ID, ServiceNow GRC, Archer, OneTrust).
  • Education & Certifications
    • Bachelor’s degree in Accounting, Information Systems, Computer Science, Cybersecurity, or related field; Master’s degree a plus.
    • One or more of the following required:
      • CISA (Certified Information Systems Auditor)
      • ISO/IEC 27001 Lead Implementer or Lead Auditor (or equivalent ISO credential)
      • CPA (active)
    • Additional relevant certifications a plus: CISSP, CCSP, CRISC, CISM, ISO/IEC 42001-related training/credentials.
  • Key Performance Indicators (KPIs)
    • Bookings & Revenue: Meets/exceeds individual and practice sales targets; healthy pipeline coverage, appropriate recovery/margins
    • Client Satisfaction & Expansion: New service-line cross-sells; referenceable clients.
    • People Metrics: Team utilization, retention, timely feedback, and progression of staff.

Any unsolicited resumes submitted through our website or to SC&H Group, Inc., employee e-mail accounts are considered property of SC&H Group, Inc., and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for SC&H Group, Inc., there must be a formal written agreement in place and the agency must be invited, by SC&H's Talent Acquisition team, to submit candidates for review.

ABOUT SC&H

SC&H is an employee-owned, global consulting and financial services firm – home to people who believe in the power of trusted personal relationships. Everyone here shares a passion for driving results, fueled by the genuine connections we forge. Our expert capabilities and exceptional service have shaped the firm’s longstanding reputation for excellence and impressive growth. But it’s the partnerships we build and the success we help deliver that make each day rewarding — for our colleagues, our clients, and our communities.

Recognized annually by Inc., Baltimore Business Journal, Accounting Today, and Inside Public Accounting as a “Best Place to Work,” SC&H is routinely named one of the fastest-growing firms for organic growth in the United States. Our success is powered by 13 diverse practices at the intersection of finance, technology, and accounting; 430+ professionals across offices in Maryland, Tysons Corner / Washington D.C., Philadelphia, Chicago, and India; and a client base ranging from emerging growth to world-renowned Fortune 500 companies. This is the place to build lasting professional relationships, grow your skills, and fulfill your potential. 

SC&H
Make it Rewarding.

Salary & Benefits

The expected annual base salary for this position is $140,000-$175,000. Salary offers are made based on a variety of candidate specific factors such as candidate's skills, performance, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. As a 100% employee-owned firm, SC&H offers the unique benefit of real equity ownership for every colleague with at least 1 year of service. Watch your stake grow as your tenure increases and the firm achieves success. We also offer a comprehensive health plan with multiple options to suit your needs, at least 4 weeks of paid time off, 8 firm-paid holidays, 401k with employer match, and an annual firm trip for you and a guest to an all-inclusive tropical location.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

Apply