Technology Risk Manager Jobs
Technology Risk Manager jobs are open across financial services, banking, healthcare, and technology, at every level from analyst to director and VP, with specializations in IT risk, operational risk, and enterprise risk management. See the openings below and apply to the ones that match your experience.
Find Technology Risk Manager JobsOverview
Showing 5 of 154+ Technology Risk Manager jobs
About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Global Technology Risk team provides independent second-line oversight of technology availability, reliability, operational resilience, and recovery capabilities across Visa's critical services and infrastructure. The team partners closely with Engineering, Site Reliability Engineering (SRE), Architecture, Incident Management, Business Continuity, and Technology Risk stakeholders globally to assess and strengthen the resiliency of Visa's technology ecosystem.
This role combines deep technical expertise with technology risk management to evaluate whether critical systems are designed, operated, monitored, and recovered within established service objectives and risk tolerances. The successful candidate will be capable of translating complex technical risks into meaningful business impacts while providing independent challenge and oversight of engineering controls and resilience practices.
The ideal candidate possesses hands-on experience supporting large-scale distributed systems and production environments and can effectively assess technology risks using technical evidence and data-driven analysis.
Key Responsibilities
Availability & Reliability Risk Oversight
- Independently assess availability, reliability, and resilience risks across critical services, cloud platforms, infrastructure, applications, and third-party dependencies.
- Evaluate technology risks in relation to service criticality, customer impact, operational resilience requirements, and Visa's risk appetite.
- Provide effective challenge and oversight of engineering processes, reliability practices, and control effectiveness.
Risk Assessment & Control Assurance
- Develop and execute risk-based assurance reviews focused on availability, reliability, and operational resilience controls.
- Assess both design adequacy and operating effectiveness of technology controls using objective technical evidence.
- Define testing methodologies, sampling approaches, evidence requirements, and assessment criteria.
- Review system configurations, telemetry, deployment records, incident data, recovery testing results, and operational metrics to validate control performance.
- Use scripting, automation, and data analysis techniques to support repeatable testing and evidence-based conclusions.
- Document findings, assess residual risk, and validate remediation activities through closure.
Incident Learning & Recovery Assurance
- Review significant service disruptions, recurring incidents, near misses, and post-incident analyses.
- Evaluate the quality of root cause analysis, contributing factors, customer impact assessments, and corrective action plans.
- Assess disaster recovery, resilience testing, and recovery-exercise outcomes to ensure alignment with recovery objectives and resilience expectations.
Reliability Metrics & Risk Reporting
- Define, monitor, and report key risk indicators (KRIs) and reliability metrics related to service availability and operational resilience.
- Assess trends related to SLO attainment, outage frequency and duration, error-budget consumption, recovery performance, change failure rates, capacity utilization, and control deficiencies.
- Prepare executive-level reporting and risk insights for technology governance forums, senior leadership, and risk committees.
- Communicate business exposure, emerging risks, remediation progress, and reliability trends in a clear and concise manner.
AI-Enabled Risk Analysis & Assurance
- Leverage approved AI and automation capabilities to improve analysis of incident data, control evidence, technical documentation, and testing activities.
- Validate AI-generated outputs through independent review and source evidence verification.
- Ensure appropriate governance, traceability, data protection, and human accountability within AI-supported assurance processes.
Stakeholder Engagement
- Build effective partnerships across Engineering, SRE, Architecture, Cybersecurity, Business Continuity, and Technology Risk teams.
- Influence stakeholders to strengthen reliability, resilience, and control maturity across critical technology services.
- Provide subject matter expertise and independent challenge during risk reviews, resilience assessments, and remediation discussions.
Qualifications
Basic Qualifications
- 8 or more years of relevant work experience with a bachelor’s degree, OR 5 or more years of relevant work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD), OR 2 or more years of work experience with a PhD, OR 11 or more years of relevant work experience.
- Hands-on experience in Software Engineering, Site Reliability Engineering (SRE), Production Engineering, Platform Engineering, Infrastructure Engineering, or a comparable role supporting business-critical systems.
- Strong understanding of distributed systems, networking, databases, cloud infrastructure, observability platforms, service dependencies, high availability architectures, fault tolerance, and disaster recovery.
- Experience conducting technology risk assessments and evaluating the effectiveness of technical controls.
- Demonstrated ability to perform control testing, evidence evaluation, issue documentation, and remediation validation.
- Proficiency with scripting or data analysis tools such as Python, SQL, or equivalent technologies.
- Ability to interpret operational telemetry, reliability metrics, and technical evidence to assess risks and control effectiveness.
- Practical understanding of AI-assisted analysis and automation techniques, including associated risks such as hallucinations, bias, and data leakage.
- Strong written, verbal, and executive-level communication skills.
Preferred Qualifications
- Experience supporting highly available, large-scale production environments and critical customer-facing services.
- Experience participating in incident response, post-incident reviews, reliability engineering initiatives, capacity planning, resilience testing, or disaster recovery exercises.
- Experience independently presenting risk assessments and evidence-based findings to senior engineering leaders, risk committees, auditors, or regulators.
- Working knowledge of industry frameworks such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, ISO 22301, COBIT, or related operational resilience standards.
- Experience applying risk and resilience frameworks to technical environments beyond compliance-based assessments.
- Experience in payments, financial services, fintech, or other highly regulated industries.
- Experience assessing cloud-native architectures and large-scale distributed technology platforms.
- Experience applying AI, automation, or analytics capabilities to technology risk management, engineering analysis, or control assurance activities.
- Experience working within a global matrixed organization.
Information for US Applicants
Work Hours
Varies upon the needs of the department.
Travel Requirements
This position requires travel 5-10% of the time.
Mental/Physical Requirements
This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Global Technology Risk team provides independent second-line oversight of technology availability, reliability, operational resilience, and recovery capabilities across Visa's critical services and infrastructure. The team partners closely with Engineering, Site Reliability Engineering (SRE), Architecture, Incident Management, Business Continuity, and Technology Risk stakeholders globally to assess and strengthen the resiliency of Visa's technology ecosystem.
This role combines deep technical expertise with technology risk management to evaluate whether critical systems are designed, operated, monitored, and recovered within established service objectives and risk tolerances. The successful candidate will be capable of translating complex technical risks into meaningful business impacts while providing independent challenge and oversight of engineering controls and resilience practices.
The ideal candidate possesses hands-on experience supporting large-scale distributed systems and production environments and can effectively assess technology risks using technical evidence and data-driven analysis.
Key Responsibilities
Availability & Reliability Risk Oversight
- Independently assess availability, reliability, and resilience risks across critical services, cloud platforms, infrastructure, applications, and third-party dependencies.
- Evaluate technology risks in relation to service criticality, customer impact, operational resilience requirements, and Visa's risk appetite.
- Provide effective challenge and oversight of engineering processes, reliability practices, and control effectiveness.
Risk Assessment & Control Assurance
- Develop and execute risk-based assurance reviews focused on availability, reliability, and operational resilience controls.
- Assess both design adequacy and operating effectiveness of technology controls using objective technical evidence.
- Define testing methodologies, sampling approaches, evidence requirements, and assessment criteria.
- Review system configurations, telemetry, deployment records, incident data, recovery testing results, and operational metrics to validate control performance.
- Use scripting, automation, and data analysis techniques to support repeatable testing and evidence-based conclusions.
- Document findings, assess residual risk, and validate remediation activities through closure.
Incident Learning & Recovery Assurance
- Review significant service disruptions, recurring incidents, near misses, and post-incident analyses.
- Evaluate the quality of root cause analysis, contributing factors, customer impact assessments, and corrective action plans.
- Assess disaster recovery, resilience testing, and recovery-exercise outcomes to ensure alignment with recovery objectives and resilience expectations.
Reliability Metrics & Risk Reporting
- Define, monitor, and report key risk indicators (KRIs) and reliability metrics related to service availability and operational resilience.
- Assess trends related to SLO attainment, outage frequency and duration, error-budget consumption, recovery performance, change failure rates, capacity utilization, and control deficiencies.
- Prepare executive-level reporting and risk insights for technology governance forums, senior leadership, and risk committees.
- Communicate business exposure, emerging risks, remediation progress, and reliability trends in a clear and concise manner.
AI-Enabled Risk Analysis & Assurance
- Leverage approved AI and automation capabilities to improve analysis of incident data, control evidence, technical documentation, and testing activities.
- Validate AI-generated outputs through independent review and source evidence verification.
- Ensure appropriate governance, traceability, data protection, and human accountability within AI-supported assurance processes.
Stakeholder Engagement
- Build effective partnerships across Engineering, SRE, Architecture, Cybersecurity, Business Continuity, and Technology Risk teams.
- Influence stakeholders to strengthen reliability, resilience, and control maturity across critical technology services.
- Provide subject matter expertise and independent challenge during risk reviews, resilience assessments, and remediation discussions.
Qualifications
Basic Qualifications
- 8 or more years of relevant work experience with a bachelor’s degree, OR 5 or more years of relevant work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD), OR 2 or more years of work experience with a PhD, OR 11 or more years of relevant work experience.
- Hands-on experience in Software Engineering, Site Reliability Engineering (SRE), Production Engineering, Platform Engineering, Infrastructure Engineering, or a comparable role supporting business-critical systems.
- Strong understanding of distributed systems, networking, databases, cloud infrastructure, observability platforms, service dependencies, high availability architectures, fault tolerance, and disaster recovery.
- Experience conducting technology risk assessments and evaluating the effectiveness of technical controls.
- Demonstrated ability to perform control testing, evidence evaluation, issue documentation, and remediation validation.
- Proficiency with scripting or data analysis tools such as Python, SQL, or equivalent technologies.
- Ability to interpret operational telemetry, reliability metrics, and technical evidence to assess risks and control effectiveness.
- Practical understanding of AI-assisted analysis and automation techniques, including associated risks such as hallucinations, bias, and data leakage.
- Strong written, verbal, and executive-level communication skills.
Preferred Qualifications
- Experience supporting highly available, large-scale production environments and critical customer-facing services.
- Experience participating in incident response, post-incident reviews, reliability engineering initiatives, capacity planning, resilience testing, or disaster recovery exercises.
- Experience independently presenting risk assessments and evidence-based findings to senior engineering leaders, risk committees, auditors, or regulators.
- Working knowledge of industry frameworks such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO 27001, ISO 22301, COBIT, or related operational resilience standards.
- Experience applying risk and resilience frameworks to technical environments beyond compliance-based assessments.
- Experience in payments, financial services, fintech, or other highly regulated industries.
- Experience assessing cloud-native architectures and large-scale distributed technology platforms.
- Experience applying AI, automation, or analytics capabilities to technology risk management, engineering analysis, or control assurance activities.
- Experience working within a global matrixed organization.
Information for US Applicants
Work Hours
Varies upon the needs of the department.
Travel Requirements
This position requires travel 5-10% of the time.
Mental/Physical Requirements
This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
Visa is an EEO Employer
Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.Technology Risk Manager Jobs by Experience Level
See All 154+ Technology Risk Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Technology Risk Manager JobsTechnology Risk Manager Job Market
Who's Hiring
- Deloitte33
- JPMorganChase12
- EY8
- Citi7
- M&T Bank5
Top Industries Hiring
- Banking & Financial Services
- Investment & Asset Management
- Accounting & Auditing
- Fintech
- Technology & Software
What Employers Look For
The qualifications that appear most often in technology risk manager jobs.
- Bachelor's degree in information systems, finance, computer science, or a related field
- Experience with risk frameworks such as NIST, COBIT, ISO 27001, or COSO
- Professional certification such as CRISC, CISA, CISSP, or CISM
- Proficiency in GRC platforms and risk management tools
- Knowledge of regulatory requirements including SOX, FFIEC, GDPR, or PCI-DSS
- Strong written communication skills for risk reporting to executive and board audiences
Tips for Your Technology Risk Manager Job Search
Tailor your resume to risk frameworks
Hiring managers scan for specific frameworks like NIST, COBIT, and ISO 27001. Name the frameworks you've worked within and describe how you applied them, not just that you know them. Vague claims get screened out fast.
Highlight your regulatory exposure directly
Many postings prioritize candidates who've worked inside regulated environments such as SOX, FFIEC, or GDPR. Call out the specific regulatory regimes you've navigated and the outcomes you drove, not just the industries you've been in.
Distinguish IT risk from operational risk on your resume
Employers often hire for one or the other, and blending both without clarity can disqualify you. Organize your experience clearly so a recruiter can immediately see whether your background leans toward technology infrastructure risk or broader operational risk governance.
Apply early to roles that fit
Migrate Mate lists technology risk manager openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare for scenario-based technical interviews
Expect interviewers to present a real or hypothetical technology failure and ask how you'd assess and escalate it. Practice walking through risk identification, impact assessment, and remediation steps out loud before your interview.
Negotiate using the full compensation picture
Technology risk roles often include performance bonuses tied to audit outcomes or risk metrics. When negotiating, ask how the bonus structure is calculated and what historical payout rates have looked like, not just what the target percentage is.
Technology Risk Manager Jobs: Frequently Asked Questions
Which companies are hiring the most technology risk managers?
The companies hiring the most technology risk managers right now include Deloitte, JPMorganChase, and EY, with the largest share of openings in New York, Texas, and Ohio, based on current listings on Migrate Mate as of November 2026. Financial institutions, large banks, and technology firms consistently account for the highest volume of postings.
How many technology risk manager jobs are remote?
About 82% of technology risk manager openings are fully remote or hybrid as of November 2026, reflecting strong demand for flexible arrangements in this field. Roles focused on policy, governance, and third-party risk assessment tend to be the most remote-friendly, while positions requiring on-site audits or hands-on infrastructure access are more likely to be in-person.
How do you become a technology risk manager?
Start with a bachelor's degree in information systems, computer science, finance, or a related field. Build foundational experience in IT audit, information security, or compliance roles, then pursue a certification such as CRISC or CISA to signal specialized expertise. Move into risk-focused positions, progressively taking on responsibility for risk assessments, control testing, and reporting to senior stakeholders.
Can you get a technology risk manager job with little experience?
Yes, entry points exist for candidates who lack direct risk management titles but have relevant adjacent experience. IT audit, cybersecurity analysis, compliance coordination, or internal audit roles all build transferable skills. Employers also respond well to candidates who have completed a CRISC or CISA exam, even without years of formal risk management experience behind them.
What does the technology risk manager interview process look like?
Most processes include an initial screening call, followed by a technical interview covering risk frameworks, regulatory knowledge, and scenario-based questions about how you'd handle a specific technology failure or control gap. Later rounds often involve a case study or presentation to a risk committee. Some employers also conduct a behavioral interview focused on stakeholder communication and cross-functional collaboration.
Where can I find and apply to technology risk manager jobs?
You can find and apply to technology risk manager jobs on Migrate Mate, which lists current openings from across the United States. Search the roles available, find the ones that match your background and target level, and apply directly to each listing without leaving the platform.
See All 154+ Technology Risk Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Technology Risk Manager Jobs