Technology Risk & Controls Lead

We are seeking a highly skilled and motivated Data Scientist specializing in Government Cyber Security Compliance to join our dynamic team. The ideal candidate will have a strong background in data analysis, machine learning, and cyber security, with a specific focus on ensuring compliance with government regulations and standards. This role involves analyzing complex data sets to identify potential security threats, developing predictive models, and ensuring that our cyber security practices align with government compliance requirements.

As a Tech Risk & Controls Lead in Cyber Technology & Controls, you will be responsible for identifying, and mitigating compliance and operational risks in line with the firm's standards. You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards. By partnering with various stakeholders, including Product Owners, Business Control Managers, and Regulators, you will contribute to the reporting of a comprehensive view of technology risk posture and its impact on the business. Your advanced knowledge of risk management principles, practices, and theories will enable you to drive innovative solutions and effectively manage a diverse team in a dynamic and evolving risk landscape.

• Analyze large and complex data sets to identify patterns, trends, and anomalies that may indicate potential security threats or compliance issues.
• Mine Data from large heterogenous datasets to build the technical FedRAMP boundary for the payments organization, with the goal of automating the definition of the boundary and tagging related technical assets.
• Integrate asset catalog data for FedRAMP inventory into a single refined datastream for regularly scheduled consumption by relevant governing bodies
• Develop and implement machine learning models to predict and mitigate cyber security risks.
• Collaborate with cross-functional teams to ensure that cyber security practices meet government compliance standards, such as FISMA, NIST, and other relevant regulations.
• Design and maintain dashboards and reports to monitor compliance status and security metrics.
• Conduct regular audits and assessments of cyber security practices to ensure ongoing compliance with government regulations.
• Provide insights and recommendations to improve cyber security strategies and enhance compliance efforts.
• Stay up-to-date with the latest developments in cyber security, data science, and government regulations to ensure best practices are followed.
• Communicate findings and recommendations to stakeholders, including technical and non-technical audiences.

• 5+ years of experience or equivalent expertise in technology risk management, information security, or related field, emphasizing risk identification, assessment, and mitigation
• Strong understanding of government cyber security regulations and standards (e.g., FISMA, NIST).
• Proficiency in data analysis tools and programming languages such as Python, R, SQL, and machine learning frameworks.
• Experience with data visualization and automation tools such as Tableau, Power BI, Alteryx, or similar.
• Excellent problem-solving skills and attention to detail.
• Strong communication skills, with the ability to convey complex information to diverse audiences.
• Ability to work independently and collaboratively in a fast-paced environment.

• Certifications in cyber security (e.g., CISSP, CISM) or data science (e.g., Certified Data Scientist).
• Experience working with government agencies or in a highly regulated industry.
• Familiarity with cloud computing platforms and cyber security tools.
• Proven experience as a Data Scientist, preferably in the field of cyber security and compliance.