H-1B Visa Risk Manager Jobs
Risk Manager roles qualify as H-1B specialty occupations under DOL's Standard Occupational Classification system, requiring at least a bachelor's degree in finance, economics, or a related field. Financial services, insurance, and large tech firms file the most H-1B LCAs for this title, with two-year initial periods and unlimited renewals.
See All Risk Manager JobsOverview
Showing 5 of 3,126+ Risk Manager jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 3,126+ Risk Manager jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Risk Manager roles.
Get Access To All JobsINTRODUCTION
PJT Partners is a global advisory-focused investment bank. Our team of senior professionals delivers a wide array of strategic advisory, shareholder advisory, restructuring and special situations and private fund advisory and placement services to corporations, financial sponsors, institutional investors and governments around the world. We offer a unique portfolio of advisory services designed to help our clients achieve their strategic objectives. We also provide, through PJT Park Hill, private fund advisory and fundraising services for alternative investment managers, including private equity funds, real estate funds and hedge funds.
From the beginning, PJT Partners has firmly believed that having the best people is key to building an enduring franchise. Our perspective was, and remains, that a great team brings in both top tier clients and appeals to a wide-range of diverse, talented colleagues. Fostering an inclusive culture, which welcomes differing perspectives and beliefs, enables us to provide the best advice and insights to our clients.
Responsibilities
The Technology department at PJT is responsible for creating and continuously improving a robust and secure technology foundation that supports the firm's business activities. As artificial intelligence becomes deeply embedded in both internal operations and the broader vendor ecosystem, the firm faces a new and rapidly evolving risk surface. The AI Security & Risk Manager will be PJT's dedicated subject matter expert at the intersection of AI and security, helping the firm navigate this landscape with rigor and clarity.
We are seeking a high-performing AI Security & Risk professional to join the Cybersecurity team. Reporting to the Head of Technology Risk, this individual will own the firm's approach to identifying, assessing, and managing risk introduced by AI — both through internal AI deployments and through vendors increasingly embedding AI into their platforms. The role requires a practitioner who can operate at both a strategic and technical level: fluent in AI architecture and threat modeling while equally capable of communicating risk clearly to senior leadership and regulators. The candidate must build strong relationships across Technology, Legal, Compliance, and the business to ensure AI risk is managed as an enterprise priority, not a silo.
Additional responsibilities include:
AI Risk Governance & Strategy
- Own and maintain the firm's AI risk framework, covering model risk, data privacy, adversarial threats, third-party AI, and regulatory compliance.
- Develop and enforce AI usage policies in collaboration with Legal and Compliance, including acceptable use, data classification requirements, and prompt handling standards.
- Maintain an inventory of AI tools deployed firm-wide — both sanctioned and shadow — and assess associated risk profiles.
- Provide regular AI risk reporting to the Head of Technology Risk and senior leadership, including emerging threat trends, vendor posture changes, and control gaps.
- Monitor the evolving regulatory environment for AI (EU AI Act, SEC guidance, DORA, NY DFS) and advise on compliance obligations and required controls.
Vendor AI Evaluation & Third-Party Risk
- Lead security and risk assessments of vendors introducing AI capabilities into existing or new platforms, including evaluating model transparency, data handling practices, and auditability.
- Develop and maintain a structured AI vendor evaluation framework, incorporating criteria for model governance, output reliability, data residency, and incident response obligations.
- Partner with Procurement and Legal to ensure AI-specific provisions are reflected in vendor contracts, including data usage restrictions, model change notifications, and liability terms.
- Maintain a tiered risk register of third-party AI integrations, with ongoing monitoring for material changes to vendor AI functionality, architecture, or ownership.
- Engage directly with vendor security and product teams to assess AI-related controls and drive remediation of identified gaps.
AI Threat Modeling & Security Architecture
- Conduct threat modeling for AI systems and integrations, including risks from prompt injection, model inversion, training data poisoning, and adversarial inputs.
- Evaluate AI-specific attack surfaces introduced by LLM integrations, agentic workflows, and MCP-connected data sources.
- Collaborate with infrastructure and application teams to embed AI security controls into deployment pipelines and system design reviews.
- Assess risks associated with AI-generated content, including deepfake vectors, synthetic phishing, and automated social engineering in the context of financial services.
- Contribute to the firm's broader security architecture by ensuring AI components are assessed within the existing control framework.
Internal AI Program Oversight
- Serve as the security and risk point of contact for the firm's internal AI deployments, including Claude Enterprise and any future platform integrations.
- Evaluate data retention, access control, and logging practices for AI platforms to ensure alignment with the firm's compliance and eDiscovery obligations.
- Provide risk assessments for proposed AI use cases across the firm, including a structured framework for approving, conditionally approving, or declining adoption.
- Support audit and compliance reviews related to AI, including evidence collection and engagement with regulators or external assessors as required.
- Develop and deliver AI security awareness content for technology staff and end users.
QUALIFICATIONS
PJT Partners seeks to hire individuals who are highly motivated, intelligent and have demonstrated excellence in prior endeavors. In addition, qualified candidates will possess the following:
- Bachelor's degree in Computer Science, Information Security, Data Science, or a related field; advanced degree a plus.
- At least 7–10 years of experience in information security, technology risk, or a related field, with a minimum of 3 years focused on AI systems, machine learning security, or AI governance.
- Deep understanding of the AI and LLM landscape, including foundation model architecture, agentic systems, RAG pipelines, and the risk implications of each.
- Hands-on experience evaluating AI platforms and products, including the ability to assess vendor claims about model behavior, data handling, and security controls with appropriate skepticism.
- Familiarity with AI risk frameworks and emerging standards, including NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and ISO/IEC 42001.
- Experience with vendor risk management in a regulated financial services environment, including contract negotiation support and third-party security assessments.
- Knowledge of relevant regulatory frameworks including DORA, SOX, SEC cybersecurity disclosure rules, and GDPR/CCPA as they apply to AI data flows.
- Strong technical skills sufficient to evaluate AI system architecture, API security, data pipeline design, and access control models without reliance solely on vendor documentation.
- Excellent communication skills, with the ability to translate highly technical AI risk concepts into clear, decision-ready language for senior leadership, Legal, and Compliance.
- Experience operating in a Microsoft-first environment, including familiarity with Entra ID, Azure, and M365 security tooling, is a strong plus.
- Ability to work independently, manage competing priorities, and operate effectively in a fast-paced, lean team environment.
- Relevant certifications such as CISSP, CISM, CRISC, or emerging AI-focused credentials a plus.
Expected annualized base salary of $150,000 - $175,000
This range represents the low and high ends of the expected annualized base salary for this position. The specific base salary received by any employee will be informed by a number of factors, including but not limited to, role level and scope, location, candidate’s relevant qualifications, skills and experience.
Base salary is one component of PJT Partners’ compensation structure. In addition to base salary, PJT Partners’ compensation structure may include additional rewards, incentives and benefits, including but not limited to, a discretionary bonus component.
PJT is an equal opportunity employer. We do not discriminate on the basis of, and will consider all qualified applicants for employment without regard to race, color, religious creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity expression, disability, medical condition, genetic information or predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other category protected by law. PJT Partners also complies with all applicable laws with regard to providing reasonable accommodation of disabilities to applicants. For more information or to request an accommodation, please contact Human Resources.
California Applicants: PJT Partners will consider for employment qualified applicants with arrest and/or conviction records in a manner consistent with applicable law including, but not limited to, the San Francisco Fair Chance Ordinance and/or Los Angeles Fair Chance Initiative for Hiring Ordinance.
Applicant Privacy Notice: View our Applicant Privacy Notice here. If you are a California resident, please refer to our California Applicant Privacy Notice for further information.
In order to be considered, please ensure your resume/CV is submitted in PDF format.
INTRODUCTION
PJT Partners is a global advisory-focused investment bank. Our team of senior professionals delivers a wide array of strategic advisory, shareholder advisory, restructuring and special situations and private fund advisory and placement services to corporations, financial sponsors, institutional investors and governments around the world. We offer a unique portfolio of advisory services designed to help our clients achieve their strategic objectives. We also provide, through PJT Park Hill, private fund advisory and fundraising services for alternative investment managers, including private equity funds, real estate funds and hedge funds.
From the beginning, PJT Partners has firmly believed that having the best people is key to building an enduring franchise. Our perspective was, and remains, that a great team brings in both top tier clients and appeals to a wide-range of diverse, talented colleagues. Fostering an inclusive culture, which welcomes differing perspectives and beliefs, enables us to provide the best advice and insights to our clients.
Responsibilities
The Technology department at PJT is responsible for creating and continuously improving a robust and secure technology foundation that supports the firm's business activities. As artificial intelligence becomes deeply embedded in both internal operations and the broader vendor ecosystem, the firm faces a new and rapidly evolving risk surface. The AI Security & Risk Manager will be PJT's dedicated subject matter expert at the intersection of AI and security, helping the firm navigate this landscape with rigor and clarity.
We are seeking a high-performing AI Security & Risk professional to join the Cybersecurity team. Reporting to the Head of Technology Risk, this individual will own the firm's approach to identifying, assessing, and managing risk introduced by AI — both through internal AI deployments and through vendors increasingly embedding AI into their platforms. The role requires a practitioner who can operate at both a strategic and technical level: fluent in AI architecture and threat modeling while equally capable of communicating risk clearly to senior leadership and regulators. The candidate must build strong relationships across Technology, Legal, Compliance, and the business to ensure AI risk is managed as an enterprise priority, not a silo.
Additional responsibilities include:
AI Risk Governance & Strategy
- Own and maintain the firm's AI risk framework, covering model risk, data privacy, adversarial threats, third-party AI, and regulatory compliance.
- Develop and enforce AI usage policies in collaboration with Legal and Compliance, including acceptable use, data classification requirements, and prompt handling standards.
- Maintain an inventory of AI tools deployed firm-wide — both sanctioned and shadow — and assess associated risk profiles.
- Provide regular AI risk reporting to the Head of Technology Risk and senior leadership, including emerging threat trends, vendor posture changes, and control gaps.
- Monitor the evolving regulatory environment for AI (EU AI Act, SEC guidance, DORA, NY DFS) and advise on compliance obligations and required controls.
Vendor AI Evaluation & Third-Party Risk
- Lead security and risk assessments of vendors introducing AI capabilities into existing or new platforms, including evaluating model transparency, data handling practices, and auditability.
- Develop and maintain a structured AI vendor evaluation framework, incorporating criteria for model governance, output reliability, data residency, and incident response obligations.
- Partner with Procurement and Legal to ensure AI-specific provisions are reflected in vendor contracts, including data usage restrictions, model change notifications, and liability terms.
- Maintain a tiered risk register of third-party AI integrations, with ongoing monitoring for material changes to vendor AI functionality, architecture, or ownership.
- Engage directly with vendor security and product teams to assess AI-related controls and drive remediation of identified gaps.
AI Threat Modeling & Security Architecture
- Conduct threat modeling for AI systems and integrations, including risks from prompt injection, model inversion, training data poisoning, and adversarial inputs.
- Evaluate AI-specific attack surfaces introduced by LLM integrations, agentic workflows, and MCP-connected data sources.
- Collaborate with infrastructure and application teams to embed AI security controls into deployment pipelines and system design reviews.
- Assess risks associated with AI-generated content, including deepfake vectors, synthetic phishing, and automated social engineering in the context of financial services.
- Contribute to the firm's broader security architecture by ensuring AI components are assessed within the existing control framework.
Internal AI Program Oversight
- Serve as the security and risk point of contact for the firm's internal AI deployments, including Claude Enterprise and any future platform integrations.
- Evaluate data retention, access control, and logging practices for AI platforms to ensure alignment with the firm's compliance and eDiscovery obligations.
- Provide risk assessments for proposed AI use cases across the firm, including a structured framework for approving, conditionally approving, or declining adoption.
- Support audit and compliance reviews related to AI, including evidence collection and engagement with regulators or external assessors as required.
- Develop and deliver AI security awareness content for technology staff and end users.
QUALIFICATIONS
PJT Partners seeks to hire individuals who are highly motivated, intelligent and have demonstrated excellence in prior endeavors. In addition, qualified candidates will possess the following:
- Bachelor's degree in Computer Science, Information Security, Data Science, or a related field; advanced degree a plus.
- At least 7–10 years of experience in information security, technology risk, or a related field, with a minimum of 3 years focused on AI systems, machine learning security, or AI governance.
- Deep understanding of the AI and LLM landscape, including foundation model architecture, agentic systems, RAG pipelines, and the risk implications of each.
- Hands-on experience evaluating AI platforms and products, including the ability to assess vendor claims about model behavior, data handling, and security controls with appropriate skepticism.
- Familiarity with AI risk frameworks and emerging standards, including NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and ISO/IEC 42001.
- Experience with vendor risk management in a regulated financial services environment, including contract negotiation support and third-party security assessments.
- Knowledge of relevant regulatory frameworks including DORA, SOX, SEC cybersecurity disclosure rules, and GDPR/CCPA as they apply to AI data flows.
- Strong technical skills sufficient to evaluate AI system architecture, API security, data pipeline design, and access control models without reliance solely on vendor documentation.
- Excellent communication skills, with the ability to translate highly technical AI risk concepts into clear, decision-ready language for senior leadership, Legal, and Compliance.
- Experience operating in a Microsoft-first environment, including familiarity with Entra ID, Azure, and M365 security tooling, is a strong plus.
- Ability to work independently, manage competing priorities, and operate effectively in a fast-paced, lean team environment.
- Relevant certifications such as CISSP, CISM, CRISC, or emerging AI-focused credentials a plus.
Expected annualized base salary of $150,000 - $175,000
This range represents the low and high ends of the expected annualized base salary for this position. The specific base salary received by any employee will be informed by a number of factors, including but not limited to, role level and scope, location, candidate’s relevant qualifications, skills and experience.
Base salary is one component of PJT Partners’ compensation structure. In addition to base salary, PJT Partners’ compensation structure may include additional rewards, incentives and benefits, including but not limited to, a discretionary bonus component.
PJT is an equal opportunity employer. We do not discriminate on the basis of, and will consider all qualified applicants for employment without regard to race, color, religious creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity expression, disability, medical condition, genetic information or predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other category protected by law. PJT Partners also complies with all applicable laws with regard to providing reasonable accommodation of disabilities to applicants. For more information or to request an accommodation, please contact Human Resources.
California Applicants: PJT Partners will consider for employment qualified applicants with arrest and/or conviction records in a manner consistent with applicable law including, but not limited to, the San Francisco Fair Chance Ordinance and/or Los Angeles Fair Chance Initiative for Hiring Ordinance.
Applicant Privacy Notice: View our Applicant Privacy Notice here. If you are a California resident, please refer to our California Applicant Privacy Notice for further information.
In order to be considered, please ensure your resume/CV is submitted in PDF format.
See all 3,126+ Risk Manager jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Risk Manager roles.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Risk Manager
Verify your degree aligns with SOC codes
USCIS evaluates specialty occupation by matching your degree field to the role's SOC code. For Risk Manager positions, degrees in finance, mathematics, statistics, or economics carry the strongest alignment. A business administration degree may require additional documentation.
Search LCA filings by occupation code
Use the OFLC Wage Search to filter Labor Condition Applications by the Risk Manager SOC code. This shows which employers filed recently, how many positions they sponsored, and what wage levels they certified, before you apply.
Target E-Verify enrolled financial firms
STEM OPT extensions require E-Verify enrollment, but for H-1B transfers, E-Verify enrollment signals an employer already has infrastructure for sponsored hires. Financial services firms and insurance companies make up a disproportionate share of Risk Manager H-1B filings.
Use Migrate Mate to find sponsoring employers
Filter Risk Manager roles by verified H-1B filing history on Migrate Mate. You'll see which employers have active LCA records for this title, so you're not guessing about sponsorship willingness during the application process.
Negotiate offer timing around the April cap deadline
H-1B cap petitions must be filed by early April for an October 1 start. If you receive an offer in May or June, your start date likely shifts to the following fiscal year. Build this into salary and start-date negotiations with your hiring manager.
Document quantifiable risk outcomes for the I-129
Your employer's attorney will need evidence of specialty occupation. Gather performance reviews, project summaries, or internal reports showing you applied risk modeling, scenario analysis, or regulatory frameworks. Generic job descriptions create RFE exposure.
Risk Manager jobs are hiring across the US. Find yours.
Find Risk Manager JobsRisk Manager H-1B Visa: Frequently Asked Questions
Does a Risk Manager role qualify as an H-1B specialty occupation?
Yes. USCIS recognizes Risk Manager as a specialty occupation under the relevant SOC classification when the position normally requires at least a bachelor's degree in finance, economics, mathematics, or a directly related field. Employers who post Risk Manager roles requiring generic degrees, or no degree at all, can face specialty occupation RFEs, so job description wording matters significantly.
Which industries file the most H-1B petitions for Risk Manager positions?
Financial services, banking, insurance, and large technology companies account for the majority of H-1B LCA filings for Risk Manager titles. Consulting firms that place risk professionals at client sites also file frequently. You can verify employer-level filing activity through the OFLC Wage Search before targeting your applications. Migrate Mate also surfaces this data by employer and role.
Can I transfer my H-1B to a new Risk Manager role at a different employer?
Yes. H-1B portability under AC21 lets you start working for a new employer once the transfer petition is filed, without waiting for approval, as long as your previous H-1B was approved and you've maintained valid status. The new employer must file a new I-129 with a new LCA certified for the specific role and work location.
What prevailing wage level should a Risk Manager H-1B petition target?
Most Risk Manager H-1B petitions are filed at DOL wage Level II or Level III, depending on the role's complexity, supervisory responsibilities, and required credentials. The employer's LCA must certify a wage at or above the applicable prevailing wage for the role's SOC code and geographic area. You can check current prevailing wage data through the OFLC Wage Search.
How does the H-1B lottery affect hiring timelines for Risk Manager roles?
Cap-subject H-1B petitions are filed in early April for an October 1 start date. If your employer files and you're selected in the lottery, there's a five-to-six-month gap before you can begin. Some financial institutions and large tech firms qualify as cap-exempt H-1B employers, allowing petitions to be filed year-round without lottery participation. Confirm your target employer's cap status during the offer stage.
See which Risk Manager employers are hiring and sponsoring visas right now.
Search Risk Manager Jobs