Principal Technology Risk

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content. Must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate like immigration sponsorship note? That's a note but maybe not boilerplate? It's a note about immigration sponsorship; it's not a section heading. Should we keep it? It's a note about sponsorship; it's substantive? It's a condition. Might be considered metadata; but we can fold into a short

. The instruction: "do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." Immigration sponsorship note is minor metadata; we can include in a

. Also we need to preserve all substantive information. So we need to extract sections: About the role (the description of role), Responsibilities (list of duties), Requirements (maybe experience, education), Qualifications (certifications), Skills (technical skills), Benefits (none mentioned), Pay (none), Schedule (onsite working model). The posting includes "Fidelity’s Onsite Working Model" which is schedule info. So we can create a Schedule section with that content. Benefits: none mentioned, so omit. Pay: none, omit. We need to use

• for any list of duties/requirements/benefits. So responsibilities list as
  . Requirements maybe as
  . Skills as
  . Qualifications maybe as
  (certifications). We'll need to decide what goes where. Let's parse the posting: - "The Role" paragraph: description of role. Could be About the role. - Then "The Expertise And Skills You Bring" bullet-like sentences (no actual bullet formatting but sentences). Contains: Strong analytical..., Strong knowledge..., Experience leading..., Proven ability..., Knowledge of..., 6+ years’ experience..., Bachelor’s Degree..., Professional technology risk certifications..., Lead in-depth risk assessments..., Provide risk consultation..., Identify systematic risk themes..., Cross Functional Partnership..., Perform in-depth data analysis..., Liaison with Internal and External audit teams... These are responsibilities and skills mixed. We need to separate into sections: Responsibilities (duties), Requirements (experience, education), Skills (technical skills), Qualifications (certifications). The posting lumps many items; we need to interpret. Better approach: Use sections: About the role (the initial paragraph). Responsibilities (list of duties: evaluating risks, enhancing program activities, working with teams, performing risk assessments, monitoring controls, documenting remediation, providing consulting, engaging with leadership, etc). Requirements (6+ years experience, Bachelor's degree). Skills (analytical, problem solving, critical thinking, knowledge of cloud native architectures, container platforms, CI/CD, application security, database management, AI/ML/LLM, data science, RPA). Qualifications (certifications: CISSP, CISA, CRISC, CISM, CCSP, CCSK, AWS). Also maybe "Professional technology risk certifications ... preferred" and "Cloud Certification(s) ... preferred". That's qualifications. We also have schedule: "Fidelity’s Onsite Working Model" paragraph. We must not include boilerplate like immigration sponsorship note, legal provisions, etc. Remove those. We need to preserve all substantive information; we must not invent or summarize away detail. So we need to keep the specifics: e.g., "evaluating risks (technology, financial, reputational, and regulatory)", "enhancing and managing the core program activities", "working with Technology, Operations and Risk teams to holistically manage the risk portfolio", "performing proactive risk and control assessments, monitoring technology controls, documenting and overseeing remediation plans", "provide appropriate risk and controls consulting on key FI initiatives and Emerging Technologies activities", "engage with FI and Senior leadership, Internal Audit and External Audit teams". Also "Lead in-depth risk assessments of strategic initiatives cloud modernization program, emerging technology implementation and key business capabilities." "Provide risk consultation to technology leadership and risk partners". "Identify systematic risk themes and emerging threats and communicate insights into technology and business leadership". "Cross Functional Partnership with legal, risk, compliance and enterprise technology teams to provide tactical and strategic guidance on risk initiatives and incidents." "Perform in-depth data analysis and apply innovative automated tools to provide management with proper context of potential exposure and loss of business due to control weaknesses." "Liaison with Internal and External audit teams, tracking internal and external audit findings, perform issues follow-up, consulting and action plans with owners and issue resolution." We need to keep these as list items. For Skills: "Strong analytical, problem solving and critical thinking skillset with the ability to assess risk, challenge assumptions and influence decision making across partners and senior leadership", "Strong knowledge of cloud native architectures, container platforms, CI/CD Pipelines, application security and database management platforms.", "Knowledge of artificial intelligence, machine learning, LLM, data science, and Robotic Process Automation (RPA) tools." For Requirements: "6+ years’ experience in information technology risk, cyber security, controls, or audit roles.", "Bachelor’s Degree in computer science, information technology, cybersecurity, engineering or a related field of study preferred." For Qualifications: "Professional technology risk certifications (CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred." We could also include "Lead in-depth risk assessments..." as responsibility. Now schedule: "Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles." We'll put that under Schedule section. Now we need to output HTML fragment only, no /, no markdown fences. We'll produce something like:

  About the role

  The Technology Risk team for Fidelity Institutional (FI) within the Enterprise Technology Risk group is seeking a passionate, driven, and experienced professional to join the team. You will work with a team leaders focusing on evaluating risks (technology, financial, reputational, and regulatory), enhancing and managing the core program activities, and working with Technology, Operations and Risk teams to holistically manage the risk portfolio. You will work closely with the various Technology Risk Centers of Excellence (CoEs) including performing proactive risk and control assessments, monitoring technology controls, documenting and overseeing remediation plans. You will also provide appropriate risk and controls consulting on key FI initiatives and Emerging Technologies activities, and engage with FI and Senior leadership, Internal Audit and External Audit teams.

  Responsibilities

  • Evaluating risks (technology, financial, reputational, and regulatory)
  • Enhancing and managing the core program activities
  • Working with Technology, Operations and Risk teams to holistically manage the risk portfolio
  • Performing proactive risk and control assessments
  • Monitoring technology controls
  • Documenting and overseeing remediation plans
  • Providing appropriate risk and controls consulting on key FI initiatives and Emerging Technologies activities
  • Engaging with FI and Senior leadership, Internal Audit and External Audit teams
  • Leading in-depth risk assessments of strategic initiatives, cloud modernization program, emerging technology implementation and key business capabilities
  • Providing risk consultation to technology leadership and risk partners
  • Identifying systematic risk themes and emerging threats and communicating insights to technology and business leadership
  • Cross-functional partnership with legal, risk, compliance and enterprise technology teams to provide tactical and strategic guidance on risk initiatives and incidents
  • Performing in-depth data analysis and applying innovative automated tools to provide management with proper context of potential exposure and loss of business due to control weaknesses
  • Liaising with Internal and External audit teams, tracking internal and external audit findings, performing issues follow-up, consulting and action plans with owners and issue resolution

  Requirements

  • 6+ years’ experience in information technology risk, cyber security, controls, or audit roles
  • Bachelor’s Degree in computer science, information technology, cybersecurity, engineering or a related field of study preferred

  Skills

  • Strong analytical, problem solving and critical thinking skillset with the ability to assess risk, challenge assumptions and influence decision making across partners and senior leadership
  • Strong knowledge of cloud native architectures, container platforms, CI/CD pipelines, application security and database management platforms
  • Knowledge of artificial intelligence, machine learning, LLM, data science, and Robotic Process Automation (RPA) tools

  Qualifications

  • Professional technology risk certifications (CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred

  Schedule

  Fidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.

  We must not include any extra sections like Benefits, Pay. Also we omitted the immigration sponsorship note and legal provisions. Good. Check that we didn't repeat job title as heading. No. We used

  for each section. Used

  • for lists. Used

    for prose. We preserved all substantive information. Did we miss any? The original also had "The Technology Risk team for Fidelity Institutional (FI) within the Enterprise Technology Risk group is seeking a passionate, driven, and experienced professional to join the team." That's in About the role paragraph. Good. We also had "You will work with a team leaders focusing on evaluating risks..." etc. Included. We had "You will work closely with the various Technology Risk Centers of Excellence (CoEs) including performing proactive risk and control assessments, monitoring technology controls, documenting and overseeing remediation plans." Included. We had "You will also provide appropriate risk and controls consulting on key FI initiatives and Emerging Technologies activities, and engage with FI and Senior leadership, Internal Audit and External Audit teams". Included. We had "Lead in-depth risk assessments of strategic initiatives cloud modernization program, emerging technology implementation and key business capabilities." Included as responsibility. We had "Provide risk consultation to technology leadership and risk partners". Included. We had "Identify systematic risk themes and emerging threats and communicate insights into technology and business leadership". Included. We had "Cross Functional Partnership with legal, risk, compliance and enterprise technology teams to provide tactical and strategic guidance on risk initiatives and incidents." Included. We had "Perform in-depth data analysis and apply innovative automated tools to provide management with proper context of potential exposure and loss of business due to control weaknesses." Included. We had "Liaison with Internal and External audit teams, tracking internal and external audit findings, perform issues follow-up, consulting and action plans with owners and issue resolution." Included. We had "Strong analytical, problem solving and critical thinking skillset with the ability to assess risk, challenge assumptions and influence decision making across partners and senior leadership". Included as skill. We had "Strong knowledge of cloud native architectures, container platforms, CI/CD Pipelines, application security and database management platforms." Included. We had "Experience leading Technology risk assessments, control assessments, IT Audits or implementing Cybersecurity controls for large scale financial service organizations." This is a requirement/experience; we have 6+ years experience but not explicitly "leading Technology risk assessments...". Should we include that as a requirement or responsibility? It's a requirement. We could add to Requirements list: "Experience leading technology risk assessments, control assessments, IT audits or implementing cybersecurity controls for large-scale financial service organizations". Let's add. We