10876 - Technology Risk Manager - Integrated Risk Management "IRM"

Hyundai AutoEver America (HAEA) is the IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. We provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a global and collaborative environment where you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

About the role

The Technology Risk Manager is responsible for end-to-end coordination and execution support of all internal and external security-related audits. This role acts as the central point of accountability for audit facilitation—ensuring audits are properly scoped, resourced, executed, and closed, while integrating audit outcomes seamlessly into established risk operations processes. The role requires exceptional organizational discipline, stakeholder engagement, and a strong understanding of technology risk, audit lifecycles, and governance expectations.

Responsibilities

• Audit Planning & Intake
  • Serve as the single point of coordination for all internal and external security-related audits.
  • Facilitate audit intake, ensuring audits are clearly scoped, appropriately prioritized, and aligned with business, regulatory, and risk objectives.
  • Identify and confirm audit stakeholders, control owners, and subject matter experts across the environment.
  • Partner with relevant stakeholders to ensure agreement and understanding of audit scope, objectives, timelines, and dependencies.
• Audit Execution & Coordination
  • Coordinate audit activities across all phases, including planning, fieldwork, evidence collection, issue validation, and reporting.
  • Ensure audits are properly staffed, with clear accountability for evidence production and responses.
  • Track audit requests, evidence submissions, and auditor inquiries to ensure timely and complete responses.
  • Proactively manage risks, bottlenecks, and dependencies that may impact audit timelines or quality.
• Stakeholder Engagement & Communication
  • Drive continuous stakeholder engagement throughout the audit lifecycle.
  • Ensure all stakeholders understand audit scope and expectations, are informed of progress, risks, and upcoming milestones, and receive timely communication on changes or escalations.
  • Facilitate status updates, checkpoints, and working sessions with auditors and internal teams.
  • Act as a trusted liaison between auditors and the Security organization, balancing transparency with control.
• Findings Management & Risk Integration
  • Coordinate the intake, review, and validation of audit findings.
  • Ensure audit findings are clearly understood, accurately documented, mapped to relevant controls, policies, and standards, and integrated into Risk Issue Management processes.
  • Partner with Risk Operations to ensure findings are appropriately risk-rated, remediation plans are defined, owned, and tracked, and closure evidence meets audit and risk standards.
• Governance, Reporting & Continuous Improvement
  • Maintain centralized audit tracking and documentation, ensuring audit readiness and traceability.
  • Produce audit status reporting for Senior Leadership, Customers, and relevant governance forums.
  • Identify trends, recurring issues, and systemic control gaps across audits.
  • Recommend process improvements to reduce audit friction and improve audit outcomes over time.

Requirements

• Experience
  • 10+ years of experience in technology audit coordination, Technology Risk, GRC, IT Audit, or Compliance.
  • Hands-on experience supporting internal and/or external audits in a technology or security environment.
  • Proven ability to manage complex, cross-functional stakeholder environments.
  • Familiarity with GRC platforms.
  • 3-5 years of people leadership experience managing and developing high-performing teams in a professional environment.
• Education
  • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Technical Expertise
  • Strong understanding of audit lifecycles, control testing, and issue management.
  • Strong knowledge of technology control frameworks (e.g., NIST CSF/800-53, ISO 27001, CIS).
  • Exceptional organizational, tracking, and communication skills.
• Language Skills
  • Excellent stakeholder management and communication skills.
  • Proficient in English for effective communication and coordination.

Preferred Qualifications

• Experience
  • Audit or assessment leadership experience working within a CISO organization or large enterprise technology environment.
  • 7+ years of experience in a top-tier professional services firm, leading and delivering technology audit and/or risk management engagements.
• Education and Certifications
  • Master’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline is preferred.
  • Industry-recognized credentials such as CISSP, CISM, CRISC, or CIA are highly desirable.
• Language Skills
  • Bilingual in English and Korean language proficiency is preferred to support global coordination and communication.

Team Culture

The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.

Pay

Base Salary Range: $150,000 - $185,000