Risk

• Provide cybersecurity support to the Department of State Directorate of Technology, Enterprise Architecture, and Cyber Security Team
• Ensure compliance with FISMA and the Risk Management Framework (RMF)
• Support IASS personnel and RMF Leads in translating control deficiencies, vulnerability findings, and operational issues into risk records and remediation plans
• Maintain consistent risk characterization, POA&M development, remediation tracking, closure-evidence review, and portfolio risk analysis across RMF delivery teams
• Review findings for control mapping, risk rationale, system applicability, residual exposure, and remediation priority
• Develop POA&Ms with accountable owners, milestones, dependencies, and closure evidence
• Track overdue, stalled, recurring, and cross-system findings and recommend escalation to the ISSO Lead
• Review closure packages for technical sufficiency and traceability
• Develop risk-response recommendations and risk-acceptance materials for Government consideration
• Analyze portfolio trends and support authorization briefings, audits, and reporting without altering independent assessor conclusions

Risk Governance and POA&M SME

• Define and implement the future of payments governance and risk management
• Provide oversight of end-to-end core payments functions across the enterprise
• Consult with lines of business and provide solutions for payments-related challenges while enabling business objectives
• Partner with Compliance, First line Risk Offices, and lines of business to define risk levels, procedures, and governance structures
• Serve as connective tissue across product, technology, operations, and risk management partners
• Advise stakeholders on integrating payment risk management across new products, use cases, and critical initiatives
• Provide thought leadership on external payments developments, emerging technology, regulations, and industry perspectives
• Identify payment risk trends and opportunities for risk mitigation
• Coordinate payment rail-specific reviews with senior stakeholders
• Simplify manual oversight workflows through data analysis tools and streamlined process design
• Deliver reporting and insights to leadership forums on risk trends, incident patterns, and remediation progress

Risk Manager – Payment Risk Advisory, Business Enablement

• Serve as a liaison interfacing with business partners, Tech, legal, compliance, and other assurance functions to reduce risk
• Synthesize data and reporting, perform analysis, and provide business insights from team analyst data
• Design, implement, and/or influence internal governance processes
• Assess controls and glean insights from issues and events across business areas
• Manage, implement, and deliver key program deliverables
• Drive strategy and execute high-priority platform modernization projects
• Work with stakeholders across the company to deliver results impacting the company’s bottom line

Card Vertical Risk Manager

• Build, maintain, and continuously refine the TDOI risk identification, assessment, risk logs, and escalation framework using enterprise tooling
• Influence integration of risk tooling architecture into newly built tools
• Own the Well-Managed Roadmap end-to-end
• Translate audit signals, control testing results, and operational insights into a prioritized remediation plan
• Ensure every open finding has an assigned owner and target delivery date
• Run the recurring operating review cadence for risk evaluation, control effectiveness, and risk acceptance decisions across TDOI functions
• Identify systemic control gaps and surface risks with cross-enterprise exposure for enterprise-level handling
• Partner with Process Strategists to embed standardized control suites and audit-defensible documentation in local process designs

Manager, Risk Operating Model Lead

• Lead the design and implementation of RBAC and ABAC within Databricks Unity Catalog, including data structures, access models, and tagging standards
• Define security architecture for data access, including dynamic views, row-level security, and column masking
• Develop the identity governance approach for Databricks, including service principals, workload identities, and enterprise identity-provider integration
• Translate regulatory, contractual, and compliance requirements into technical controls
• Establish and maintain data classification standards and tagging structures
• Implement grants, catalogs, tags, and access controls as code using Terraform and/or Databricks Asset Bundles
• Work with workspace administrators and platform engineers to align workspace, compute, secrets, and network controls with the broader data access strategy
• Create guardrails, templates, and workflows enabling secure data-access management by data engineers
• Serve as senior technical owner of the Databricks data access control model
• Build the Databricks security function and collaborate with data engineering, platform engineering, and enterprise stakeholders

Data Governance Engineer

• Act as the end-to-end technology and cyber risk partner for senior technology executives
• Provide comprehensive support to engineering organizations and drive the strategic vision for risk assessment and management programs
• Design and implement AI applications, agents, and automation workflows for risk monitoring efficiency
• Govern the responsible implementation of AI and technology innovation
• Rationalize technology and cyber controls and influence updates to enterprise policies, standards, and control descriptions
• Execute large-scale architecture transformation programs and technology integrations
• Oversee project scope, timelines, and deliverables
• Collaborate with Cyber, Audit, and Risk functions on shared controls, risk identification, and mitigation strategies
• Serve as the primary point of contact for audit and compliance engagements
• Create high-level reporting and metrics for leadership on the overall risk environment

Senior Manager, Tech Risk & Analysis - Retail Bank

• Drive end-to-end technology and cyber risk assessments from implementation and evaluation through remediation tracking and risk finding closure
• Support responsible AI application implementation and large-scale architecture transformations through timely risk assessments
• Prioritize risk initiatives and ensure timely delivery of results
• Build stakeholder relationships across engineering, operations, cyber, and risk functions
• Guide risk and engineering partners through complex risk landscapes
• Identify, design, and implement process improvements for risk identification, assessment, and mitigation workflows
• Monitor and analyze risk metrics and dashboards and oversee remediation efforts
• Prepare compliance documentation and data for audits
• Lead recurring risk forums and metrics reviews
• Own and drive RCSA workflows
• Develop and manage risk measurement frameworks and communicate data-driven insights to senior leadership
• Proactively identify, own, and resolve risks with limited supervision

Senior Risk Specialist, Tech Risk

• Lead cybersecurity risk management, compliance, and C-SCRM activities across systems, applications, infrastructure, cloud environments, products, services, and supporting technology supply chains
• Conduct comprehensive IT security risk assessments and threat analyses to identify vulnerabilities, control weaknesses, threat exposure, and potential impacts
• Lead and coordinate C-SCRM assessments of technology products, software, hardware, services, suppliers, vendors, and third-party dependencies
• Identify and evaluate supply chain cybersecurity risks related to product provenance, supplier dependencies, software components, third-party services, and technology acquisition
• Conduct and oversee security control assessments to determine safeguard effectiveness and identify remediation or risk treatment gaps
• Evaluate risks associated with unauthorized access, excessive privileges, insecure access procedures, platform vulnerabilities, system configurations, data protection weaknesses, and third-party access
• Develop and maintain cybersecurity and C-SCRM risk registers
• Perform risk analysis and develop actionable mitigation and remediation recommendations
• Track security deficiencies and remediation activities through closure, including POA&M development and management
• Support RMF processes, including security assessment, authorization, continuous monitoring, and ongoing risk management
• Assess compliance with cybersecurity policies, security requirements, contractual obligations, and security control frameworks
• Review system security documentation, assessment results, vulnerability findings, control evidence, architecture artifacts, and supporting documentation
• Collaborate with cybersecurity, engineering, architecture, acquisition, program management, and operational stakeholders
• Provide risk-based recommendations to program and cybersecurity leadership
• Support continuous monitoring of cybersecurity and supply chain risks
• Develop and maintain risk assessment reports, compliance documentation, C-SCRM artifacts, executive risk summaries, metrics, dashboards, and supporting cybersecurity documentation
• Serve as a senior cybersecurity risk and C-SCRM advisor to project teams, system owners, security personnel, and organizational leadership

Senior Risk & Compliance Analyst – C-SCRM Lead

• Contribute to the development and execution of a sustainable enterprise policy program
• Develop and deliver communications and presentations through ERM communication channels and CPO-led forums
• Write, edit, and deliver communications supporting risk management functions, practices, and activities
• Review policy documents and partner with stakeholders to drive consistency and improve content
• Conduct effective challenge on policy documents throughout the policy management lifecycle
• Monitor adherence to the enterprise policy program and evaluate adherence practices
• Consult and support stakeholders in establishing required policy adherence practices
• Analyze policy management data to identify risks, process improvements, and training needs
• Lead specialized initiatives to evolve and improve the company’s policy program
• Develop training, tools, and resources for managing policy documents
• Maintain direct relationships with policy stakeholders and advise on policy creation and management
• Identify issues for escalation to appropriate CPO forums
• Collaborate with senior leadership across Operational Risk Management, Compliance, Legal, Technology, Internal Audit, and Regulatory Relations

Risk Manager

• Serve as a key risk thought partner for new businesses and emerging payments activities
• Evaluate AI capabilities, smart automation, and advanced analytics to modernize the payments risk landscape
• Document payments use cases and support lines of business in demonstrating adherence to payment risk policies and standards
• Identify opportunities to deploy RPA, natural language processing, and predictive risk analytics
• Streamline manual governance and oversight, operationalize controls, and improve monitoring efficiency
• Partner with Accountable Executives, Product, Technology, and Business Risk Offices
• Assess strategy, operations, and risks across ACH, wire, card, and real-time payment types throughout the payment lifecycle
• Drive risk mitigation across strategic and emerging payments initiatives across the enterprise
• Build and define risk modernization approaches for new businesses and payment programs

Risk jobs in Virginia