About the role
We are hiring for a large financial services client. You will be the technology lead for a supplier cybersecurity risk program. You own the tools roadmap, write the requirements, and automate manual work, so assessors can spend their time on risk instead of paperwork.
What you will do
Own the roadmap for the program's tools
Write business and technical requirements
Serve as the integration expert
Automate manual workflows and introduce AI where approved
Support testing and coordinate change
Train assessors on new processes and tools
What you bring
10+ years of experience, with 4+ years owning a GRC or third party risk tool roadmap
Experience writing business and technical requirements
Integration expertise, including APIs and workflows in tools such as ServiceNow, Archer, OneTrust, and ProcessUnity
Experience automating manual workflows
Experience supporting UAT and change management
Experience training end users
Nice to have
Introducing approved AI or GenAI into assessment workflows
RPA or low code tools such as Power Automate or UiPath
Agile product ownership
Preferred certifications
Optional: ServiceNow CIS, CTPRP, CISA, CISSP, SAFe or CSPO
Technology and frameworks
ServiceNow, Archer, OneTrust, and ProcessUnity, plus APIs, workflows, Power Automate, and UiPath.
Related job titles
Background we look for
Experience in a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager) is strongly preferred. Consulting experience from a Big 4 firm or managed security provider is welcome when you were embedded with an enterprise team. Tool fit matters, so be ready to tell us which third party risk platforms you have implemented.