Tech Risk and Controls Lead - Data Strategy and Controls - GT CDAO

Join our team to play a pivotal role in mitigating Data and AI tech risks and upholding operational excellence, driving innovation in risk management.

As a Data Strategy & Controls Lead in the Global Technology Chief Data and Analytics Office, you will be responsible for identifying, assessing, and mitigating compliance, operational, and data-related risks in line with the firm's standards. You will provide subject matter expertise and execution oversight across technology, data, and AI governance processes, ensuring controls are designed, implemented, and operating effectively throughout the lifecycle. By partnering with Product Owners, Business Control Managers, Data Owners, Model Risk, and Regulators, you will contribute to reporting a clear and comprehensive view of technology and data risk posture and its impact on the business. Your knowledge of risk management, data governance, and control execution enables consistent adoption of firmwide frameworks while addressing line-of-business-specific needs in a complex and evolving environment.

Job responsibilities

• Ensure effective identification, quantification, communication, and management of technology, data, and AI-related risk, with a focus on root cause analysis, governance execution, and remediation tracking
• Support implementation and ongoing execution of firmwide technology, data, and AI governance frameworks within the line of business, tracking adherence, identifying gaps, and driving closure through defined controls and escalation paths
• Develop and maintain robust relationships, serving as a trusted partner to LOB technologists, data owners, assessment teams, and control managers to enable coordinated risk and governance outcomes
• Execute reporting and governance for controls, policies, issue management, and metrics across technology and data domains, providing senior management with clear insight into control effectiveness and material risk themes
• Coordinate governance forums and operating routines as required, including agenda development, documentation, action tracking, and maintenance of decision and evidence artifacts
• Proactively monitor and evaluate control effectiveness across technology, data, and AI use cases, identifying gaps and recommending enhancements aligned to regulatory expectations and enterprise data strategy

• 5+ years of experience or equivalent expertise in Technology, Data, or AI risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
• Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements
• Proficient knowledge and expertise in data security, risk assessment & reporting, control evaluation, design, and governance, with a proven record of implementing effective risk mitigation strategies
• Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives

• CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications are preferred