1

Senior Technology Risk Management Jobs in Boston, MA

IT Risk & Compliance Analyst

Andover, MA · On-site +1

$95K - $95K/yr

This position reports to the Manager, IT Risk & Compliance. This role is remote and may be based anywhere within the United States. Primary Job Duties and Responsibilities * Coordinate IT compliance, ...

Senior IT Audit Specialist

Rockland, MA · On-site

$100K - $131K/yr

The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit ... Minimum 7+ years of experience in IT Audit, Information Security, Technology Risk Management ...

Senior IT Audit Specialist

Rockland, MA · On-site

$120 - $180/hr

The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit ... Minimum 7+ years of experience in IT Audit, Information Security, Technology Risk Management ...

Senior IT Audit Specialist

Rockland, MA · On-site

$100K - $131K/yr

The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit ... Minimum 7+ years of experience in IT Audit, Information Security, Technology Risk Management ...

Senior IT Audit Manager

Waltham, MA · On-site

$130K - $175K/yr

... k management, or SOX advisory, with significant focus on IT General Controls and enterprise ... senior leaders. * Strong understanding of ITGC domains including access management, change ...

Senior IT Audit Specialist

Rockland, MA · On-site

$100K - $131K/yr

The Senior IT Audit Specialist will also contribute to the evolution of the Bank's IT audit ... Minimum 7+ years of experience in IT Audit, Information Security, Technology Risk Management ...

Showing results 21-40

Senior Technology Risk Management information

See Boston, MA salary details

$24.4K

$128.5K

$228.1K

How much do senior technology risk management jobs pay per year?

As of Sep 6, 2026, the average yearly pay for senior technology risk management in Boston, MA is $128,476.00, according to ZipRecruiter salary data. Most workers in this role earn between $91,800.00 and $157,500.00 per year, depending on experience, location, and employer.

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees an organization’s information security and technology risks, developing strategies to identify, assess, and mitigate potential threats. They often work with frameworks like ISO 27001 or NIST, lead risk assessments, and ensure compliance with industry regulations to protect digital assets and infrastructure.

What are the most commonly searched types of Technology Risk Management jobs in Boston, MA?

The most popular types of Technology Risk Management jobs in Boston, MA are:

What are popular job titles related to Senior Technology Risk Management jobs in Boston, MA?

For Senior Technology Risk Management jobs in Boston, MA, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in Boston, MA look for?

The top searched job categories for Senior Technology Risk Management jobs in Boston, MA are:

What cities near Boston, MA are hiring for Senior Technology Risk Management jobs?

Cities near Boston, MA with the most Senior Technology Risk Management job openings:

Infographic showing various Senior Technology Risk Management job openings in Boston, MA as of August 2026, with employment types broken down into 1% As Needed, 82% Full Time, 14% Part Time, and 3% Contract. Highlights an 90% Physical, 2% Hybrid, and 8% Remote job distribution, with an average salary of $128,476 per year, or $61.8 per hour.

IT Security Manager - Third-Party IT Risk Manager

Mass Digital Health

Waltham, MA • On-site

$118 - $207/hr

Other

Medical, Dental, Vision, Retirement, PTO

Posted 19 days ago


Key responsibilities

  • Lead and evolve Wolters Kluwer's global Third Party Risk Management (TPRM) program and operating model.

  • Implement continuous monitoring capabilities and design innovative approaches using automation and AI for risk assessment and evidence collection.

  • Develop, review, and analyze third party contracts to ensure company requirements and assets are protected.


Job description

Third‑Party IT Risk Manager is responsible for leading and modernizing Wolters Kluwer’s global third‑party cyber risk management capability across a highly distributed, market‑driven technology and supplier landscape. This role ensures third-party engagements align with the organization’s risk appetite, security standards, and regulatory expectations and lead the execution of a scalable, intelligence‑led TPRM program that delivers meaningful and defensible assurance over third‑party cyber risk—moving beyond traditional, questionnaire‑centric models.

The role partners closely with Global Supply Chain, Procurement, Legal, and Privacy teams to reduce fragmentation across markets by translating diverse, market‑specific approaches into standardized enterprise agreements, security configurations, and control expectations. A core focus of this position is innovation: designing and implementing differentiated third‑party assurance approaches that leverage automation, technical validation, and continuous monitoring to provide real‑time insight into supplier risk rather than relying solely on static assessments.

Responsibilities:

Program Leadership & Modernization

  • Lead and evolve Wolters Kluwer’s global Third Party Risk Management (TPRM) program and operating model, ensuring it is scalable, risk based, and aligned with enterprise cyber risk governance.
  • Modernize TPITRM by shifting from a primarily questionnaire driven approach to a data driven program that incorporates technical validation, continuous monitoring, AI, and risk quantification.
  • Lead, whether functionally or formally – junior team members as a manager level leader across the TPRM function to drive successful outcomes across the entire TPRM unit.

Continuous Monitoring, Automation & Innovation

  • Implement continuous monitoring capabilities to deliver near real time visibility into third party cyber posture, control performance, and emerging risk indicators.
  • Design and deploy innovative approaches—including automation and AI assisted techniques for evidence collection, risk scoring, and exception management.
  • Continuously assess emerging tools, data sources, and assurance models to improve risk coverage, reduce assessment friction, and enhance signal quality beyond traditional questionnaires.

Contract Review:

  • Strong skills in the development, review, and analysis of third party contracts to ensure Company requirements, principles, and assets are sufficiently protected in accordance with internal expectations.
  • Strong business acumen and ability to identify technical and functional requirements that do not align or meet Company needs, suggest enhancements, and have them accepted and implemented by the supplier.

Governance, Reporting & Escalation

  • Maintain a centralized, enterprise wide inventory of third party relationships, risk tiers, and risk treatment decisions.
  • Provide clear, concise reporting on third party cyber risk posture, trends, and concentration risk to senior leadership.

Leadership & Collaboration

  • Build, lead, and develop a high performing team of third party risk professionals and technical reviewers.
  • Foster a culture of accountability, innovation, and constructive challenge consistent with Wolters Kluwer values and operating principles.
Job Qualifications
  • Bachelors degree in computer science, information security, management information systems or similar.
  • 12+ years of experience in cybersecurity, technology risk, or information security, including significant ownership of third party or supplier cyber risk management in large, complex enterprises.
  • 5+ years of leadership (direct managerial experience or functional delivery leading teams).
  • Proven experience designing and leading a global TPRM program across the full third party risk lifecycle.
  • Demonstrated success modernizing TPRM by implementing risk based approaches that integrate technical validation, automation, and continuous monitoring.
  • Demonstrated success owning decisions and outcomes at a senior level independently without formal authority.
  • Strong technical fluency across cloud platforms, APIs, identity, data flows, and integration architectures, with the ability to partner credibly with security architects and technical SMEs.
  • Experience overseeing advanced technical assessments for high risk or critical third parties, such as architecture reviews, vulnerability assessments, penetration testing, and threat modeling.
  • Ability to operate effectively in highly distributed, market driven environments.
  • Demonstrated leadership experience, including building high performing teams and influencing senior stakeholders across Technology, Procurement, Legal, Privacy, and Enterprise Risk Management.
  • Strong executive communication skills, with experience reporting third party cyber risk posture and trends to senior leadership.
Preferred qualification
  • Familiarity with systemic, concentration, and fourth‑party risk.
  • Working knowledge of NIST CSF, ISO 27001, GDPR, and CCPA.
  • Relevant certifications (e.g., CISSP, CISM, CTPRP, CRISC, CISA)

#LI-Hybrid

Our Interview Practices

To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we’re getting to know you—not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process.

Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.

Compensation:

$118,300.00 - $207,400.00 USDThis role is eligible for Bonus.

Compensation range listed is based on primary location of the position. Actual base salary offer is influenced by a wide array of factors including but not limited to skills, experience and actual hiring location. Your recruiter can share more information about the specific offer for the job location during the hiring process.

Additional Information:

Wolters Kluwer offers a wide variety of competitive benefits and programs to help meet your needs and balance your work and personal life, including but not limited to: Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available upon request.

#J-18808-Ljbffr