Job Description

A career at T. Rowe Price says you want to contribute and make a difference at a leading global investment management firm where success results from the dedication our associates have in building success for our clients. We are a growing organization of associates from diverse backgrounds, experiences, and perspectives.



We take a long-term view on associates and their careers. Our associates do phenomenal work with purpose, and as a result, we provide growth opportunities through in-person and online training, management development programs, and career development on the job.



If you are seeking a meaningful work experience along with a workplace culture that thrives on teamwork, we invite you to explore the opportunity to join us.

Role Summary:

The Technology risk team executes on the key services of technology risk management, assurance, and reporting. The Sr. Manager, Technology Risk is responsible for ensuring the successful completion various initiatives related to Technology Risk. The Sr. Manager is responsible for providing guidance to Global Technology groups to ensure appropriate risk mitigation steps are understood and implemented. In addition, the Sr. Manager is responsible for the coordination of the enterprise risk management framework within a business line, and identifies and recommends new or enhanced policies, practices, and procedures.

Responsibilities:

* Support the Head of Technology Risk in developing the maturity of risk management activities across IT and provide thought leadership as required
* Provide independent second line oversight and monitoring of key risks across technology, including core architecture and infrastructure, data management, development, cyber security and other related functions
* Partner with first line senior management to maintain the technology risk framework, including assessment of key risks and establishment agreed upon risk tolerance levels
* Provide challenge and assessment of potential technology risk including information and cyber security control weaknesses. Provide technology risk subject matter expertise, and monitor and communicate the risk environment to management, and other key stakeholders, effectively
* Ensure the development of an effective technology risk assessment and oversight plan in conjunction with the business
* Lead focused risk and control reviews on specific technology functions and processes based on risk assessment
* Provide second line activities in the evaluation of technology risks for new products, systems and material change projects
* Establish and produce management KRI reporting to senior management, including the Risk & Operational Steering Committee (ROSC) in support of the various activities across technology.
* Provide second line technology risk support in the selection, management and oversight of strategic and/or critical third party IT service providers
* Partner closely with third line Internal Audit function to ensure an effective integrated risk assessment and assurance testing program is maintained
* Maintain a risk register to manage various technology risk and compliance programs

Qualifications:

Required:

* Bachelor's degree or the equivalent combination of education and relevant experience and 8+ years of total relevant work experience

Preferred:

* Certification as a Certified Information Systems Auditor (CISA), Certified Information Systems Professional (CISSP), Certified Risk Professional (CRP)
* Excellent knowledge and experience of Technology, Information Security and Cyber risk management and their application within the financial services industry.
* Solid technical and functional knowledge of the external regulations, policies and developments for Information Security, Cyber Risk and IT risk.
* Solid technical and functional knowledge of financial services (investment management and trading) internal rules and policies.
* Prior knowledge leading and executing IT audit, IT internal control, and IT risk consulting engagements, leveraging IT governance and control frameworks such as COBIT, NIST CSF, NIST 800-53, CSF, and ITIL and proficiency in core requirements and methodologies for internal control programs
* Demonstrated experience in general computer controls and IT control of applications, operating systems, and databases
* Proven ability to understand, identify, analyze and communicate clearly an organizations data and technology risks.
* Proven experience in applying legal/regulatory guidance into solving practical problems.
* Good understanding of the overall operational processes and technology challenges within the financial services industry.
* Knowledge of qualitative vs. quantitative risk management and inherent vs. residual risk in order to properly determine and report on technology risk levels
* Experience with IT risk management operating models, three lines-of-defense frameworks, integrated risk management practices, and/or risk intelligence capabilities
* Understanding of business continuity / disaster recovery principles

Job Family: Risk Management

Track: Knowledge Management

Level: KM4

Competitive salary (USD) starts at:

103700

Salary commensurate with experience and geographical location.

We devote a lot of energy to ensuring we offer our associates wellness, retirement and quality-of-life benefits which incorporate a wide variety of needs. Please view What We Offer to see what's available to you.

T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, colour, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.