Embedded Risk Manager

About the Role

We are seeking an experienced Embedded Risk Manager to serve as a key risk and controls partner across a diverse technology landscape, including Infrastructure, Applications, Cybersecurity, Networking, and Mainframe environments. This role will be responsible for proactively managing technology risk, driving remediation efforts, supporting audit deliverables, and partnering directly with exception owners to ensure regulatory and control obligations are met. The ideal candidate possesses a broad technology risk background and has extensive experience operating within highly regulated environments.

Responsibilities

• Act as an embedded risk advisor supporting technology teams across Infrastructure, Applications, Security, Network, and Mainframe domains.
• Drive identification, assessment, tracking, and remediation of technology risk exceptions and findings.
• Partner directly with exception owners to establish remediation plans, track progress, and remove obstacles to resolution.
• Manage large volumes of open risk exceptions and ensure timely escalation of high-risk items.
• Facilitate risk governance activities, including issue management, corrective action plans, milestone tracking, and executive reporting.
• Coordinate and support internal and external audit engagements, including audit deliverables, evidence gathering, and remediation validation.
• Maintain documentation demonstrating risk mitigation progress and milestone completion for regulatory and audit requirements.
• Monitor compliance with enterprise risk management frameworks and technology control standards.
• Collaborate with cross-functional stakeholders to address findings that may require involvement beyond the immediate technology teams.

Requirements

• 7+ years of experience in Technology Risk Management, Operational Risk, IT Audit, Information Security Risk, or Governance, Risk & Compliance (GRC).
• Experience operating within highly regulated financial services, banking, capital markets, or similar industries.
• Hands-on experience managing risk programs across multiple technology disciplines including Infrastructure, Applications, Cybersecurity, Network Engineering, and Mainframe Operations.

Skills

• Strong experience using RSA Archer for risk, issue, exception, and remediation management.
• Deep understanding of risk and control frameworks, including NIST.

Preferred Qualifications

• Experience supporting large-scale enterprise technology environments.
• Familiarity with technology governance, regulatory compliance, operational resilience, and control management programs.
• Knowledge of industry regulations and standards applicable to financial institutions.
• Professional certifications such as CRISC, CISSP, CISA, or CGEIT.

Benefits

• Medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP).
• 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program and access to certification prep, technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks for associations including CompTIA and IIBA.
• Dedicated customer service team and certified Career Coach.

Everforth Apex offers a range of supplemental benefits and professional development resources. A full list of benefits, programs, and support teams is available in the ‘Welcome Packet’ provided by an Everforth Apex team member.