Note: The job is a remote job and is open to candidates in USA. Wilson Sonsini Goodrich & Rosati is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. The Manager, IT Risk Operations will lead a small team to develop executive-level reporting on IT risk and compliance, manage IT governance, and oversee vendor risk management while ensuring adherence to IT policies and frameworks.
Responsibilities
- Lead the development of executive-level reporting on IT risk, compliance posture, and operational performance
- Build and evolve KPI/KRI dashboards that provide real-time visibility into risk trends and control effectiveness
- Translate complex IT and security data into meaningful insights for decision making
- Ensure adherence to IT policies, standards, and leading frameworks (e.g., NIST, ISO 27001)
- Own and evolve the firm’s IT risk register and Risk & Control Self-Assessment (RCSA) program
- Identify emerging and systemic risks across IT, security, privacy, and operational processes
- Partner with General Counsel, Security, and IT to lead internal investigations
- Oversee governance and reporting across the IT Service Management (ITSM) ecosystem
- Analyze incident, change, and problem management data to identify trends and improvement opportunities
- Drive workflow optimization and automation within ServiceNow
- Review and advise on vendor agreements
- Enhance vendor risk processes, including risk tiering, assessments, and monitoring
- Identify opportunities to streamline processes, enhance reporting, and improve governance
- Introduce data-driven approaches to risk management and operational oversight
- Perform related duties as assigned or directed by supervisor
- Maintain compliance with all firm policies and procedures
Skills
- Bachelor's degree preferred
- Seven years of experience in IT risk, security compliance, technology audit, or IT governance preferred
- Experience operating in complex, regulated environments (e.g., law firms, financial services, consulting) preferred
- CISA, CISSP, CRISC, CTPRM and/or ITIL preferred
- Proven ability to lead reporting, analytics, and governance initiatives
- Familiarity with ServiceNow and ITSM reporting including understanding of incident, change, and problem management lifecycles
- Experience with security and collaboration platforms such as Microsoft 365, Purview and email security tools
- Working knowledge of frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001 and SOC 2
- Strong understanding of control design, risk registers, RCSA programs, and audit response
- Basic understanding of privacy regulations
Benefits
- Discretionary year-end merit bonus based on performance
- Highly competitive salary and benefits package
Company Overview
Company H1B Sponsorship