[Hiring] Tech Risk Management Consultant @Diverse Lynx LLC

Role Description

We are seeking an experienced Tech Risk Management Consultant to assess, manage, and monitor technology and cybersecurity risks across applications, infrastructure, cloud platforms, and AI-enabled solutions. The ideal candidate will have strong knowledge of IT risk frameworks, security controls, regulatory compliance, risk assessments, and Governance, Risk, and Compliance (GRC) tools.

• Collaborate with Security, Engineering, Infrastructure, Compliance, Audit, and Business teams to identify control gaps, support audits, manage remediation activities, and strengthen enterprise technology risk governance.
• Conduct technology and cyber risk assessments across applications, infrastructure, cloud platforms, and AI-enabled solutions.
• Identify, assess, document, and monitor technology risks and control gaps.
• Evaluate control design and operating effectiveness.
• Maintain enterprise risk registers and risk treatment plans.
• Evaluate cloud, AI, application, infrastructure, and third-party risks.
• Assess compliance with corporate security policies, standards, and regulatory requirements.
• Support audits, regulatory reviews, and compliance assessments.
• Track remediation activities and validate the closure of identified risks and control deficiencies.
• Develop risk metrics, dashboards, and executive reports for senior management.
• Review new technologies and AI solutions for operational, security, privacy, and compliance risks.
• Support enterprise risk governance, policy development, and risk reporting processes.

Qualifications

• Experience in Technology Risk Management, IT Risk, Cyber Risk, Information Security, Audit, or GRC.
• Strong knowledge of risk frameworks:
• NIST Cybersecurity Framework (CSF)
• NIST 800-53
• ISO 27001/27005
• COBIT and COSO
• SSAE 18/SOC
• Experience conducting technology risk assessments, cyber risk assessments, control testing, security reviews, and Risk & Control Self-Assessments (RCSA).
• Knowledge of information security, cloud security, application security, infrastructure security, and data protection controls.
• Experience managing risk registers, risk treatment plans, exceptions, issues, and regulatory compliance.
• Experience with third-party and vendor risk assessments.
• Hands-on experience with GRC tools such as Archer, ServiceNow GRC, OneTrust, or MetricStream.
• Knowledge of SOX, PCI-DSS, GDPR, and CCPA requirements.
• Understanding of AWS, Azure, and associated cloud risk management practices.
• Strong stakeholder management, reporting, and executive communication skills.

Company Description

Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance.

This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Our official website is www.diverselynx.com . We do not operate or authorize any other websites representing Diverse Lynx LLC.