Senior Lead Technology Risk Officer – Application Domain, SDLC, DevOps, AI

. Provide expert second-line oversight of modern engineering practices, including application architecture patterns, secure SDLC, CI/CD, DevSecOps, platform engineering, infrastructure as code, containerized workloads, and production release controls .

Posted 10/28/2026full-timeUnited StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Technology Risk Management, focusing on modern engineering practices such as DevSecOps, CI/CD, and secure SDLC. Proficient in evaluating application architectures and implementing engineering controls to enhance security and compliance.

Highest-signal resume keywords

Technology Risk ManagementDevSecOps ExpertiseCI/CD ImplementationApplication Security TestingGitHub or GitLab Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Technology RiskSoftware EngineeringDevSecOpsApplication SecurityAutomated TestingDeployment AutomationInfrastructure as CodeSecrets ManagementRisk AssessmentControl Effectiveness Evaluation

Soft Skills

Exceptional JudgmentExecutive CommunicationInfluencing Skills

Tools & Technologies

GitHubGitLabJenkinsAzure DevOpsTerraformKubernetesCloud PlatformsObservability Tools

Certifications & Qualifications

NISTSSDFCOBITFFIEC GuidanceISO 27001

Industry Keywords

Secure SDLCApplication ArchitectureProduction Release ControlsCode ProvenanceArtifact Immutability

Tech Stack

Tools & technologies

AzureCloudJenkinsKubernetesSDLCTerraform

About the role

Key responsibilities & impact

Provide expert second-line oversight of modern engineering practices, including application architecture patterns, secure SDLC, CI/CD, DevSecOps, platform engineering, infrastructure as code, containerized workloads, and production release controls
Own second-line technology risk coverage across the application risk domain
Partner with first-line engineering, controls, and technology teams to oversee application architecture, development practices, deployment pipelines, and engineering controls
Perform technical assessments of source control workflows, branching strategies, build systems, test automation, artifact repositories, package dependencies, deployment orchestration, and runtime platform configurations
Evaluate software delivery pipelines for code provenance, trust boundaries, secrets handling, approval models, environment segregation, artifact immutability, and rollback or recovery capabilities
Lead deep-dive technical risk reviews of delivery environments and modernization programs
Convert architecture, pipeline, and operational observations into risk statements, root causes, and remediation expectations
Analyze developer ecosystems and engineering tool chains, including repositories, CI runners, build agents, package managers, IaC frameworks, containers, Kubernetes, cloud services, and observability stacks
Evaluate AI-enabled engineering capabilities, including code assistants, prompt-based development, automated test generation, agentic tooling, and model-integrated developer platforms
Review application and platform control patterns such as policy-as-code, secrets management, service identity, environment hardening, logging, monitoring, drift detection, and release gating
Develop risk indicators and challenge metrics for SDLC, DevSecOps, and AI-enabled engineering
Serve as a trusted technical risk partner to engineering, security, architecture, and control teams

Requirements

What you’ll need

7+ years of Technology Risk experience, or equivalent demonstrated through work experience, training, military experience, or education
7+ years of progressive experience in software engineering, DevSecOps, platform or cloud engineering, application security, technology controls, or technology risk preferred
Proven technical depth across modern SDLC and DevSecOps, including source control, CI/CD, automated testing, deployment automation, production change controls, and software supply chain security
Ability to lead complex technical risk assessments, evaluate control effectiveness, identify systemic risk, and provide credible challenge
Ability to evaluate application architectures, deployment models, engineering evidence, technical standards, and control implementations
Strong command of GitHub or GitLab, Jenkins or Azure DevOps, Terraform, containers, Kubernetes, cloud platforms, application security testing, and observability tools
Experience implementing or assessing engineering controls across secure build and release processes, code provenance, secrets management, privileged automation, infrastructure as code, environment segregation, and runtime security
Understanding of AI coding assistants, automated code generation, agentic workflows, data exposure, traceability, and human oversight
Exceptional judgment, executive communication, and influencing skills
Knowledge of NIST, SSDF, COBIT, FFIEC guidance, or ISO 27001
This position does not offer sponsorship

Benefits

Comp & perks

Equal opportunity employment
Medical accommodation available upon request
Drug-free workplace