Technology Risk Business Partner
Technology Risk Business Partner
City Savings Bank- Posted 4 hours ago
- Be among the first 10 applicants
Job Description
Role Overview
As the Technology Risk Business Partner (Banking), you will serve as a embedded risk advisor across core banking technology, digital channels, payments infrastructure, and IT operations.
Key Responsibilities
- Embed directly with Engineering Lead, Enterprise Architects, Payments Tech, and Infrastructure teams to provide pragmatic risk guidance on new technology initiatives and system modernizations.
- Translate complex technical risks (e.g., legacy core dependencies, cloud misconfigurations, open-source vulnerabilities) into business impact terms for senior banking executives and risk committees.
- Conduct risk assessments on critical banking architectures, API integrations, core system migrations, and third-party fintech applications.
- Partner with DevOps and Security teams to design automated controls embedded within CI/CD pipelines and deployment workflows.
- Evaluate high-availability setups, disaster recovery (DR), business continuity planning (BCP), and single points of failure across critical payment rails (e.g., SWIFT, ACH, FedNow) and core platforms.
- Participate in major tech incident post-mortems to identify root-cause architectural weaknesses and oversee remediation plans.
- Ensure banking technology systems adhere to regulatory mandates and frameworks (e.g., FFIEC, NIST CSF, ISO 27001, PCI-DSS, DORA, SOC 2).
- Facilitate technical audit readiness, supporting internal audits and regulatory exams (e.g., OCC, Federal Reserve, FDIC, or local central bank).
- Maintain the technology risk register for assigned banking units, tracking Key Risk Indicators (KRIs) such as tech debt impact, unpatched vulnerabilities, and system uptime.
- Champion a proactive culture of risk and compliance by design across technology units.
More Info
Key Skills
risk assessments
automated controls
high-availability setups
NIST CSF
risk guidance
cloud misconfigurations
SOC 2
PCI-DSS
open-source vulnerabilities
technical audit readiness
CI CD pipelines
regulatory mandates
API integrations
DORA
Key Risk Indicators
