Manager, Technology Risk Management (Contract)

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation fintech company using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

This role is a one year contract to start. Due to the temporary nature of the engagement, this position is not eligible for visa sponsorship. 

The role:

As a Technology Risk Manager, you will be responsible for actively coordinating and supporting first line risk management activities across technology functions at SoFi. This unique opportunity will allow you to work with talented teams and stakeholders across the organization’s lines of defense to drive the improvement of SoFi’s overall risk posture. You will work with technology, business, and information security teams to assess the risk and control environment, identify key areas for improvement, support the establishment and monitoring of effective controls, and contribute to monitoring and reporting of key metrics. This is a critical role reporting into the Senior Director of Technology Risk Management, and will support SoFi’s growth, and its effective operation as a Bank Holding Company.

What You’ll Do:

• Partner with technology and business stakeholders across the organization to enable and promote management of technology risks
• Collaborate with technology and business process/control owners to establish process flows and drive the creation of cross-functional Risk and Control Matrices (RCM), and other independent risk activities as needed
• Drive the strategy for centralization of technology compliance and audit for Engineering, Product, and Design (EPD) and Technology Operations
• Be a trusted advisor in leading and driving effective Technology risk conversations with Technology teams
• Contribute to the development of the Technology Risk strategy that supports the achievements of organizational goals
• Support regulatory and other exams through leveraging existing RCMs and control knowledge
• Collaborate with cross-functional teams to understand, support, and assist with remediation of technology gaps and monitor them through completion
• Work with team members to ensure risks and processes are properly documented and corresponding controls are designed effectively to address external and internal requirements
• Assist with creation and design of controls, control attributes, and control effectiveness testing plans
• Drive continuous improvement and provide input to technology risk management processes, policies, procedures, and metrics
• Build connections and develop strong rapport across SoFi’s enterprise risk, internal audit, and other corporate compliance functions to align and enable technology risk governance, oversight, and reporting
• Demonstrate a deep sense of curiosity and willingness to learn and run after problems

 

What You’ll Need:

• 7+ years of professional and relevant experience in Technology Risk Management or IT Audit, including exposure with a Financial Technology - Framework (FFIEC, COBIT, PCI, etc.)
• Bachelors’ Degrees in Computer Science, Systems Engineering, Information Technology or equivalent technical experience
• CISA certification highly preferred
• Strong risk assessment and process evaluation experience
• Experience performing Technology risk or cyber security assessments, Control/Compliance assessments or IT Audits
• First-hand experience working with various technology and governance frameworks
• Knowledge of regulatory requirements for financial services organizations and an understanding of how to adhere to internal controls and external regulations
• Experience working in an Agile development environment 
• Flexible and adaptable; able to work through ambiguous situations to create clear systems and processes in an evolving regulatory environment
• Strong partnership capabilities and ability to build and foster strong cross-functional work relationships
• Excellent communication skills (verbal, written, and visual); ability to communicate technology and security concepts to both technic