Risk

• Manage TPMO participation in Corporate Risk Management processes, including risk and control assessments, issue management, operational risk events, control governance, and related activities
• Coordinate implementation of Corporate Risk Management requirements within TPM processes, documentation, responsibilities, and reporting routines
• Maintain the TPMO calendar of required risk activities, assessments, governance reviews, reporting, and deliverables
• Coordinate inputs from TPMO process owners and subject matter experts for timely completion of risk management obligations
• Maintain a consolidated view of TPMO risks, controls, issues, action plans, operational risk events, and governance commitments
• Incorporate Corporate Risk Management information into TPMO reporting, including key themes, emerging risks, overdue activities, and matters requiring leadership attention
• Facilitate TPMO risk governance routines, including preparing materials, documenting decisions, assigning actions, and monitoring commitments
• Support identification, documentation, escalation, and reporting of risks, issues, control gaps, and operational risk events
• Maintain governance documentation and evidence demonstrating completion of TPMO Corporate Risk Management responsibilities
• Identify dependencies, recurring themes, and reporting gaps across TPMO risk activities and escalate through governance channels
• Provide guidance to TPMO partners on Corporate Risk Management processes, documentation expectations, timelines, and reporting obligations
• Support enhancements to TPMO governance procedures, reporting processes, roles, and documentation
• Assist TPMO leadership with governance materials and risk information for management discussions and forums
• Lead the Third-Party Risk governance framework in the first line of defence, with oversight and reporting to enterprise leadership on risk and control profiles, issues/incidents, and emerging risks
• Work with Vendor Managers to ensure Third-Party Risk policies and guidelines are followed and provide actionable support to the business
• Escalate concerning trends to Senior Management, including emerging risks, control weaknesses, material change programs, and deteriorating service or performance standards
• Review internal and external Third-Party Risk events and issues to ensure root causes are identified and remediation actions are fit for purpose
• Ensure appropriate oversight and governance of intra-group arrangements and accurate reflection of business-model changes in group documentation
• Support local regulatory and audit engagements related to Third-Party Risk, including remediation activities
• Support Third-Party Risk awareness and risk management culture
• Lead cross-functional or complex projects
• Act as a subject matter expert for team members and substitute for the manager when required

Specialist, Third Party Management Office, Risk Governance

• Lead high-priority, cross-functional initiatives from problem definition through execution, bringing structure to ambiguous business challenges
• Partner with senior stakeholders to shape strategic direction, align on priorities, and drive decision-making across teams
• Break down complex problems into clear workstreams, timelines, and deliverables, ensuring progress is tracked and communicated effectively
• Synthesize inputs from multiple sources, including data, stakeholder perspectives, and regulatory considerations, into clear insights and recommendations
• Establish and run governance forums, including executive updates, to ensure alignment, visibility, and accountability
• Identify risks, dependencies, and trade-offs, and proactively work with stakeholders to navigate them
• Drive collaboration across global teams, adapting approaches to different markets, functions, and operating environments
• Support the design and implementation of sustainable processes, frameworks, and ways of working

Manager, Strategic Risk

• Conduct cybersecurity, information security, and technology risk assessments of third-party vendors and service providers
• Review vendor security documentation, including SIG questionnaires, SOC 1 and SOC 2 reports, Bridge Letters, and ISO 27001 certifications with SoA reviews
• Track, document, and manage the end-to-end vendor risk lifecycle within Archer GRC
• Use AI-powered risk platforms to parse vendor documentation and summarize control gaps
• Assess inherent and residual risks associated with third-party relationships
• Evaluate vendor compliance with internal policies, security standards, and regulatory requirements
• Identify and document control gaps, vulnerabilities, and areas of concern
• Develop risk ratings and provide recommendations for risk mitigation
• Prepare concise risk assessment reports and executive-level summaries
• Present assessment findings to business owners, risk committees, and senior management
• Perform periodic reassessments of critical and high-risk vendors
• Monitor vendors for cybersecurity incidents, financial instability, regulatory actions, and emerging risks
• Track remediation activities and validate corrective actions
• Maintain vendor risk profiles and assessment documentation
• Partner with Procurement, Information Security, Legal, Compliance, Privacy, and Business Units throughout the vendor lifecycle
• Provide guidance regarding security requirements during vendor onboarding and renewals
• Support contract reviews by recommending security and data protection requirements
• Assist business partners in understanding and managing third-party technology risks
• Ensure alignment with regulatory requirements and frameworks including NIST Cybersecurity Framework, NIST CRI, NIST 800-53, NIST 800-171, FFIEC Guidance, ISO 27001, and HIPAA as applicable
• Support audits, examinations, and regulatory reviews related to third-party risk
• Contribute to continuous improvements of the Third-Party Risk Management Program

IT Third-Party Risk Assessor

• Personally investigate and manage the company's claims
• Work with insurance companies to set claim reserves
• Identify claims requiring escalation to the insurance company during intake and gather information needed for resolution
• Manage property damage, auto damage, and workers' compensation claims
• Handle serious losses, retain and direct defense counsel, and attend mediations and depositions as needed
• Provide customer service to insureds and claimants by phone
• Prepare statistical reports of claims activity and submit reports/findings as requested
• Lead claim file reviews as requested
• Ensure appropriate measures are taken to minimize claim losses and comply with government regulations
• Recommend measures to reduce or eliminate losses due to accidents and injuries
• Communicate and behave professionally and collaboratively with all employees
• Perform other duties as assigned

Risk Claims Manager

• Develop and execute a forward-looking fraud risk roadmap aligned with business priorities, regulatory expectations, and enterprise objectives
• Design, develop, and oversee the fraud monitoring program
• Evaluate controls and strategies to improve risk reduction, client experience, catastrophic loss protection, and false positive reduction
• Partner with Enterprise Fraud, Product, Privacy, Operations, and other stakeholders to implement fraud and privacy risk mitigation solutions
• Serve as the fraud subject matter expert for the Personal Wealth business
• Advise on significant fraud events, escalations, and emerging risk matters
• Conduct fraud risk assessments and communicate control gaps, vulnerabilities, and process improvement areas
• Support policies, procedures, and governance practices related to fraud and privacy risk management
• Prepare risk insights, assessment findings, and recommendations for leadership and cross-functional partners
• Contribute to strategic initiatives and special projects related to fraud prevention

Senior Fraud Risk Manager

• Integrate operational, risk, business, governance, and external intelligence to develop enterprise technology risk perspectives
• Assess technology risk trends, plausible technology failure events, systemic conditions, emerging threats, and interconnected risk drivers across infrastructure, platforms, applications, cloud environments, and emerging technologies
• Evaluate impacts of technology innovation, cloud adoption, Frontier AI, modernization, transformation, and external market developments on enterprise risk exposure
• Monitor technology risk indicators, operational performance, incidents, control effectiveness, and external threat intelligence
• Participate in technology risk scenario analysis involving disruption, resiliency failures, operational breakdowns, cloud migration, transformation initiatives, and emerging technologies
• Develop independent risk opinions and thought leadership positions on strategic initiatives, transformation programs, cloud and AI adoption, and material technology risks
• Provide independent perspectives on governance, security, operational resilience, and risk management considerations associated with Frontier AI and other emerging technologies
• Produce executive risk briefings, risk opinions, thematic assessments, and enterprise technology risk narratives
• Enhance risk sensing, monitoring, scenario analysis, and enterprise technology risk assessment capabilities through continuous improvement of methodologies and frameworks
• Foster collaboration across Risk, Technology, Cybersecurity, Operational Risk, Business Risk, and Strategy organizations

Lead Technology Risk Officer, Enterprise Technology Risk

• Support and execute risk programs and business unit risk activities in alignment with the company’s risk appetite and corporate strategy
• Serve as a first line of defense risk professional and trusted IT partner while engaging with second line of defense functions
• Monitor execution of policies, standards, procedures, regulatory expectations, and control framework requirements
• Strengthen control inventory documentation and evidence practices
• Support Risk and Control Self-Assessments
• Identify, develop, monitor, and maintain KRIs, KPIs, and operational metrics
• Partner with control owners, risk owners, first-line stakeholders, second-line stakeholders, and other partners to track risk and control priorities through completion
• Collect, validate, and organize risk and control data from various sources
• Execute assigned risk program and business unit risk activities accurately and within required timelines
• Engage with business units to manage risks and controls and monitor adherence to applicable requirements
• Facilitate stakeholder meetings to confirm process understanding, review process maps, validate narratives, and document process-level risk and control information
• Coordinate with second-line partners, clarify expectations, escalate concerns, and support resolution of open items
• Assess control environments to determine control effectiveness and document or escalate gaps, weaknesses, and remediation needs
• Prepare documentation of review results, observations, risk and control updates, process changes, stakeholder feedback, and recommended actions
• Recommend process improvements to strengthen risk and control documentation, execution consistency, transparency, reporting quality, and alignment with risk program expectations
• Analyze KRI threshold breaches, track and report metrics and trends, and monitor corrective and remediation activities through resolution
• Prepare and maintain risk reporting and dashboards for senior leadership, committees, and governance forums

Staff IT Analyst II – IT Governance, Risk, and Controls

• Oversee privacy incident response, operations, and technology solutions protecting sensitive organizational data
• Conduct privacy incident investigations
• Help oversee privacy incident response
• Draft privacy policies and documentation related to privacy incidents, remediation, and investigations
• Collaborate with cross-functional teams to implement effective privacy programs
• Respond to data incidents and breaches
• Maintain compliance with privacy, security, and data governance standards
• Mentor and develop team members in privacy and compliance practices

Risk jobs in Arizona