Senior Manager, Technology Risk Officer

TIAA

. Serve as a subject matter expert within the second line of defense for enterprise IT and cybersecurity risk management .

Posted 10/16/2026full-timeUnited StatesSenior💰 $117,000 - $159,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity and IT Risk Management, with a strong focus on risk assessments, control effectiveness, and compliance with industry standards. Proficient in collaborating with various defense teams to identify and mitigate technology risks while supporting the implementation of risk management programs.

Highest-signal resume keywords

Cybersecurity Risk ManagementIT ComplianceRisk AssessmentsNIST FrameworkCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementControl AssessmentsIT Controls ImplementationThird-Party Risk ManagementData Analysis

Soft Skills

Relationship BuildingCollaborationCommunication

Tools & Technologies

ExcelTableauArcher GRC

Certifications & Qualifications

CISSPCISACRISCCISMCCSP

Industry Keywords

CybersecurityInformation SecurityIT AuditCOBITISOGDPR

Tech Stack

Tools & technologies

Cyber SecurityTableau

About the role

Key responsibilities & impact

Serve as a subject matter expert within the second line of defense for enterprise IT and cybersecurity risk management
Challenge, oversee, and support technology risk management programs
Partner with first-line technology and controls teams to monitor, escalate, and report significant risks and control weaknesses
Support targeted risk assessments to confirm control effectiveness and identify opportunities to strengthen controls
Evaluate application- and infrastructure-specific control gaps, identify thematic issues, and develop remediation plans
Support implementation and maturation of the Risk and Control Self-Assessment program
Coordinate with first-line IT risk and control partners to identify technology risks and control weaknesses
Review issue criticality, evaluate action plans, and assess risk-accepted issues for compliance with requirements
Provide second-line support and challenge for Information Technology Policy and IT Standards
Support management with risk committee materials, metrics reporting, and related analysis
Build relationships with first-, second-, and third-line defense teams and control partners
Guide issue and action plan owners as needed

Requirements

What you’ll need

5+ years of experience in Cybersecurity/Information Security, IT/Technology Risk Management, IT/Technology Compliance, IT/Technology Audit, or Information Technology
University degree preferred
Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or a related IT discipline preferred
7+ years of experience in Cybersecurity/InfoSec, IT/Technology Risk Management, IT/Technology Compliance, or related fields preferred
Working knowledge of NIST, COBIT, ISO, GDPR, or similar IT security control frameworks and regulations
Experience with IT controls identification and/or implementation
Experience performing risk and control assessments and/or audits across Cybersecurity/InfoSec domains
Experience with third-party risk management
Proficiency with Excel, Tableau, or Archer GRC
Professional certifications such as CISSP, CISA, CRISC, CISM, and/or CCSP preferred
Knowledge of technology systems, compliance, general risk management, and risk reporting

Benefits

Comp & perks

Superior retirement program
Competitive health, wellness, and work life offerings
Financial, physical, emotional, and overall well-being support
Future-focused skills and AI tools
Meaningful learning experiences and development pathways
Incentive program linked to performance, depending on the role