1

Senior Technology Risk Management Jobs in Pennsylvania

Enterprise Architect (IT)

Pittsburgh, PA · On-site +1

$67 - $86.50/hr

We are seeking a Principal Architect-Senior (IT)(Enterprise Architect) to help shape technology ... Familiarity with technology risk management, operational resilience, data privacy, vendor ...

Enterprise Architect (IT)

Pittsburgh, PA · On-site +1

$102K - $208K/yr

We are seeking a Principal Architect-Senior (IT) (Enterprise Architect) to help shape technology ... Familiarity with technology risk management, operational resilience, data privacy, vendor ...

Showing results 41-60

Senior Technology Risk Management information

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in Pennsylvania?

The most popular types of Technology Risk Management jobs in Pennsylvania are:

What are popular job titles related to Senior Technology Risk Management jobs in Pennsylvania?

For Senior Technology Risk Management jobs in Pennsylvania, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in Pennsylvania look for?

The top searched job categories for Senior Technology Risk Management jobs in Pennsylvania are:

IT SOX Audit Senior Controls Manager

Vanguard Group, Inc.

Malvern, PA • On-site

Full-time

Re-posted 23 days ago


Vanguard rating

8.7

Company rating: 8.7 out of 10

Based on 64 frontline employees who took The Breakroom Quiz

16th of 154 rated financial services


Job description

Vanguard's Internal Audit & SOX department is seeking an IT SOX Audit Senior Controls Manager to join the SOX Audit Services (SAS) team. SAS serves as Vanguard's centralized ICFR (internal control over financial reporting) assurance and audit function. In this role, you will oversee and review activities across the ICFR audit cycle including IT risk assessments, system walkthroughs and scoping, testing of IT and automated business process controls, deficiency evaluations, and audit reporting.
This role offers the opportunity to deepen expertise in IT and automated business process controls, technology risk, ICFR assurance, and SOX governance through audit lifecycle management and critical stakeholder engagement. You will focus on controls and processes at the intersection of financial reporting and technology risk, helping Vanguard navigate a control environment shaped by AI, automation, advanced analytics, and digital transformation. You will lead ongoing efforts to leverage automation, analytics, and AI in the audit lifecycle.
We are seeking an individual with strong critical and conceptual thinking skills, exceptional project and relationship management capabilities, strong communication, judgment, and decision-making skills, and strong technology, data, and automation acumen.
Responsibilities
  • Lead engagement with IT and business control owners and stakeholders to identify and understand relevant technology and financial reporting risks, review documentation of end-to-end processes and data flows, and ensure effective internal controls aligned with SOX and ICFR objectives.
  • Review, challenge and approve key audit documentation, including IT systems and control scoping and risk ratings, process flowcharts, testing workpapers, and control issue assessments.
  • Evaluate control exceptions and lead remediation efforts, diagnosing root causes, advising on corrective actions, and providing insights on trends for internal and external reporting.
  • Serve as a trusted partner to IT and business control stakeholders, offering guidance on certifications, issue remediation, process optimization, and effective control design while fostering strong cross-functional relationships.
  • Lead coordination across Internal Audit, SOX, Risk, Technology, Business and External Audit teams to enable timely advancement of SOX campaign objectives throughout the audit lifecycle.
  • Support technology risk mitigation strategies related to new system implementations, third-party product adoptions, control automation, and emerging technology risks that may impact Vanguard's financial reporting control environment.
  • Drive continuous improvement initiatives that enhance the use of technology, automation, and data analytics to strengthen and improve efficiency of ICFR audit execution.
  • Lead and contribute to matrixed teams, providing timely feedback, coaching, and development opportunities.
  • Drive accountability for SOX campaign execution and outcomes, proactively managing timelines, risks, and dependencies, while escalating issues to senior leadership as appropriate.
  • Participate in special projects and perform other duties as assigned.

Qualifications
  • Undergraduate degree required; advanced degree or professional certification, such as CPA, CIA, CISSP, or CISA, is a plus.
  • Minimum of five years of related work experience with knowledge of SOX concepts, practices, and procedures, as well as IT subject-matter proficiency, including automated financial controls, IT logical access, change management, and operations; audit experience within public accounting and/or internal audit is ideal.
  • Experience with controls, audit, or risk work, including IT and automated controls testing, internal audits, operational audits, advisory, consulting, or compliance, within the financial services industry, corporate finance functions, technology, or risk management ideal.
  • Experience leveraging automation, data analytics, and full population testing in the execution of audits is ideal.
  • Experience with the system development lifecycle (SDLC) and evaluating technology implementation risk is preferred.
  • Experience testing, designing, or evaluating IT and business processes and data workflows is preferred.
  • Proven ability to think critically and conceptually, exercise sound judgment, influence stakeholders, and make effective decisions in a dynamic environment.
  • Excellent project management, communication, and relationship management skills, with the ability to collaborate across Technology, Finance, Risk, external audit, and other stakeholders.

Special factors
  • This is a hybrid role - candidates must be commutable to Vanguard's Malvern, PA office.

Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission-we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

What Vanguard employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom