ZipRecruiter

Log In

1

Technology Risk Manager Jobs in Pennsylvania (NOW HIRING)

BNY Mellon

Director, Country Risk Manager

Pittsburgh, PA · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The Country Risk Manager (CRM) supports the Head of Country Risk in leading the enterprise country ... Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with ...

BNY

Director, Country Risk Manager

Pittsburgh, PA · On-site

  • Medical

  • Dental

  • Vision

  • Life

  • Retirement

  • PTO

The Country Risk Manager (CRM) supports the Head of Country Risk in leading the enterprise country ... Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with ...

Alcoa

Cyber Security Risk Analyst

New Kensington, PA · On-site

  • Retirement

  • PTO

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Risk Management, or a related discipline; equivalent professional experience may be considered in lieu of a ...

Autodesk

Senior Manager, Trust Risk 102657

Indiana, PA · On-site +1

The Trust Risk Manager needs to have lived, practical experience to guide incremental program ... Basic understanding of cloud hosting, infrastructure technologies, SaaS, and cloud services (e.g ...

previous pagenext page

Showing results 21-40

All JobsTechnology Risk JobsTechnology Risk Manager JobsTechnology Risk Manager Jobs in Pennsylvania

Technology Risk Manager information

See Pennsylvania salary details

$51.6K

$111.8K

$170.4K

How much do technology risk manager jobs pay per year?

As of Aug 18, 2026, the average yearly pay for technology risk manager in Pennsylvania is $111,824.00, according to ZipRecruiter salary data. Most workers in this role earn between $90,200.00 and $129,300.00 per year, depending on experience, location, and employer.

What is a technology risk manager?

Technology Risk Managers are professionals responsible for identifying, assessing, and mitigating risks associated with information technology systems and processes within an organization. They ensure that IT operations comply with regulations and best practices while safeguarding data and technology assets from threats such as cyberattacks, data breaches, and system failures. Their work involves developing risk management strategies, conducting risk assessments, and collaborating with other departments to ensure the organization's technology infrastructure is secure and resilient.

What are some common challenges technology risk managers face when working across different departments?

Technology Risk Managers often encounter challenges in aligning risk management strategies with the priorities of various business units. Departments may have differing levels of risk tolerance, technical understanding, and resource availability, which can make establishing consistent policies and controls difficult. Success in the role relies on strong communication and negotiation skills, as well as the ability to educate stakeholders about the importance of risk mitigation while balancing business objectives. Building collaborative relationships and maintaining flexibility are key to overcoming these cross-departmental challenges.

What are the key skills and qualifications needed to thrive as a technology risk manager, and why are they important?

To thrive as a Technology Risk Manager, you need expertise in risk assessment, cybersecurity principles, and regulatory compliance, often supported by a degree in information security or related fields. Familiarity with risk management frameworks (such as NIST or ISO 27001), GRC (governance, risk, and compliance) tools, and certifications like CISM or CISSP are typically required. Strong analytical thinking, communication, and stakeholder management skills help you translate technical risks into business terms and coordinate mitigation efforts. These abilities are critical to proactively identifying threats and ensuring organizational resilience against evolving technology risks.

What is the difference between Technology Risk Manager vs Cybersecurity Analyst?

AspectTechnology Risk ManagerCybersecurity Analyst
CertificationsCRISC, CISSP, CISACISSP, CEH, Security+
Work EnvironmentRisk assessment, policy development, complianceMonitoring security threats, incident response, vulnerability analysis
Industry UsageFinancial, healthcare, technology firmsIT security teams, government agencies, corporations

The Technology Risk Manager focuses on identifying and mitigating overall technology risks and ensuring compliance, while the Cybersecurity Analyst concentrates on protecting systems from security threats and responding to incidents. Both roles require similar certifications and often work within the same industries, but their core responsibilities differ in scope and focus.

What cities in Pennsylvania are hiring for Technology Risk Manager jobs?

Cities in Pennsylvania with the most Technology Risk Manager job openings:

Technology Risk Manager jobs near you
Infographic showing various Technology Risk Manager job openings in Pennsylvania as of August 2026, with employment types broken down into 82% Full Time, 17% Part Time, and 1% Contract. Highlights an 81% Physical, 2% Hybrid, and 17% Remote job distribution, with an average salary of $111,824 per year, or $53.8 per hour.

Senior Technology Risk Auditor

Dick's Sporting Goods

Coraopolis, PA • On-site

$77K - $94K/yr

Full-time

Re-posted 13 days ago

Dick's Sporting Goods rating

6.5

Company rating: 6.5 out of 10

Based on 1,149 frontline employees who took The Breakroom Quiz

15th of 39 rated national retailers

Job description

At DICK'S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.
If you are ready to make a difference as part of the world's greatest sports team, apply to join our team today!
OVERVIEW:
As Dick's Sporting Goods continues to grow and invest in its technology ecosystem, we're expanding our Internal Audit team with several new Technology Internal Audit roles. These positions are part of our ongoing focus on strengthening our partnership with Technology to provide assurance and insights as they build for what's next.
The Senior Technology Risk Auditor will be a key member of the Internal Audit department and will be responsible for evaluating the effectiveness of internal processes and controls to mitigate technology, security, and business risks.
Job Duties and Responsibilities
Technology and Integrated Audits
  • Performs general technology and integrated audits, with a focus on infrastructure, cloud environments, application audits, application controls, and/or interface controls, as applicable to each audit
  • Responsible for performing risk assessments and documenting processes for audit areas. Performs risk assessments to identify relevant risks to the applicable audit and determine the extent of testing procedures to be performed
  • Where applicable, partners with auditees to document process and data flows for areas under audit to use as a validation tool with the auditee to confirm understanding of the process and to document risks, control points, and scoping decisions
  • Schedules and holds walk through meetings with auditees.
  • Drafts request lists for audits and manages requests to account for turnaround time and potential follow-up requests; monitors requests for completion and reviews received requests in a timely manner to ensure it meets the audit objectives.
  • Executes audit fieldwork to consider inherent risks of the processes audited. Assists team in root cause analyses and exposure checks for issues identified
  • Communicates with audit contacts on requests, follow-up questions, and discusses observations identified through fieldwork with Technology Internal Audit Manager, Senior Manager, and/or Director prior to discussing with auditee.
  • Uses audit engagement to develop or strengthen relationships with auditees.
  • Communicate audit results and recommendations for improvement to Management through formal audit reports and presentations that consider root causes, impact/exposure, and both near and long-term recommendations/solutions

Implementation Audits
  • Performs the activities above for system Implementations and technology modernization programs, with a focus on agile development methodologies, to evaluate development, program management, integration, data conversion/validation, and testing controls

Sarbanes-Oxley (SOX) and Internal Control Testing
  • Interact with auditees to gain an understanding of the technology processes and internal controls.
  • Execute defined test steps to evaluate the controls, including technology general controls, application/interface, entity-level, and enterprise risk management.
  • Adequately prepares exception support and examples for findings and improvement opportunities.
  • Perform detailed audit testing, including root cause analyses, and assess any exposure or residual risk
  • Communicate audit results and recommendations for improvement to Management through formal audit reports and presentations

On-Site Store and Distribution Center Audits
  • Perform on-site physical inventory observations and other audit procedures at various stores
  • Assist financial/operational audit team in performing Distribution Center audits
  • Communicate audit findings and recommendations for improvement to Management via audit reports and closing meetings

QUALIFICATIONS:
  • Bachelor's Degree in Information Systems Management, Data Science, Cybersecurity, or Audit
  • 3-5 years experience, including 3+ years of technology audit, cybersecurity, or risk experience required; public accounting or consulting experience preferred
  • Understanding of Technology Risk Assessment, SOX, general technology controls, system implementation risks/controls, data governance, cybersecurity controls, and privacy risks
  • Auditing in various technology environments: Azure, Windows, Unix, Oracle, SQL Server Database, and/or iSeries
  • Technical audit knowledge of infrastructure, cloud,application controls, interface controls, control frameworks (e.g., PCI DSS, NIST, COSO), and development methodologies
  • Ability to perform root cause analysis and understand risk exposure
  • Proven ability to adapt to change
  • Excellent relationship-building skills with a strong client-service focus
  • Ability to travel up to 15% of time

#LI-JD1
VIRTUAL REQUIREMENTS:
At DICK'S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.
To ensure a smooth and secure experience, please note the following:
  • Cameras must be on during all virtual interviews.
  • AI tools are not permitted to be used by the candidateduring any part of the interview process.
  • Offers are contingent upon a satisfactory background check which may include ID verification.

If you have any questions or need accommodations, we're here to help. Thanks for helping us keep the process fair and secure for everyone!

What Dick's Sporting Goods employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply