6+ years in technical program management or technology/security risk and issue management within technology, security, or data organizations
Strong understanding of technology and security risk how issues are identified, assessed, prioritized, tracked, and remediated
Working knowledge of security infrastructure identity and access management, network and cloud security, encryption, endpoint, and vulnerability management and how controls map to risk
Experience preparing and presenting executive- and Board-level reporting on risk, security, or program status
Proven ability to drive cross-functional remediation in fast-paced, regulated environments
Experience partnering with second- and third-line Risk, Compliance, audit, and InfoSec teams on reviews and remediation
Solid data program management foundation, including data concepts such as pipelines, data quality, lineage, governance, and privacy
Hands-on experience with Jira and familiarity with GRC tools, including workflows, reporting, and metrics
Strong organizational, communication, and stakeholder management skills, with a talent for distilling complexity
Ability to operate effectively in a matrixed environment across technology, security, and business teams
Bachelor s degree in Computer Science, Information Systems, Cybersecurity, Business, or related field, or equivalent experience
Bonus Points
Experience with Agile, Waterfall, or hybrid delivery models
Familiarity with security frameworks such as NIST CSF, ISO 27001, SOC 2, or CIS Controls
Hands-on exposure to cloud security (AWS, Azure, or Google Cloud Platform) and infrastructure-as-code concepts
Experience supporting regulatory exams or audits
Familiarity with GRC tools such as Archer, ServiceNow IRM, or similar
Familiarity with modern data platforms and tools such as Snowflake, Databricks, dbt, or Airflow
CISSP, CRISC, PMP, PgMP, or Agile certifications
Experience in fintech or other regulated industries