Sr Director, Technology Risk (Hybrid)

At Broadridge, we've built a culture where the highest goal is to empower others to accomplish more. If you're passionate about developing your career, while helping others along the way, come join the Broadridge team.

Broadridge is hiring! We're seeking a seasoned Technology Risk Leader to oversee enterprise-wide technology risk management. This role integrates IT audit, regulatory compliance, infrastructure and application risk oversight, AI/model risk governance, and M&A technology due diligence. The successful candidate will bring hands-on expertise across cloud and on-premise systems (including mainframe), distributed platforms, development, security, and operations, with strong familiarity with industry frameworks such as NIST, FFIEC, CIS, and COBIT.

Responsibilities

• Enterprise Technology Risk Management: Develop and lead the technology risk program, including risk assessments, risk appetite alignment, and remediation tracking.
• IT Audit Leadership: Manage internal and external IT audits covering applications, infrastructure, access controls, change management, and vendor risk.
• AI & Model Risk Governance: Establish and maintain model governance frameworks, ensuring model validation, monitoring, explainability, and fairness consistent with emerging regulatory expectations.
• Regulatory Compliance: Interpret guidelines (FFIEC, NIST, OCC, and other regulators), translate them into actionable controls, and lead exam preparation and response activities.
• Secure SDLC / DevSecOps: Integrate security controls into development pipelines, conduct threat modeling, and perform secure design reviews throughout the CI/CD lifecycle.
• Cloud & Distributed Systems Oversight: Define and monitor cloud security posture; lead architecture reviews, identity and access management, encryption, and incident response across multi-cloud and microservices environments.
• Mainframe & Legacy Systems: Assess and strengthen control environments for mainframe systems, batch processing, and change management.
• M&A Technology Due Diligence: Conduct due diligence on security, architecture, and operations; lead post-acquisition integration risk mitigation activities.
• Frameworks & Control Mapping: Maintain alignment of control frameworks with NIST CSF/800-53, FFIEC, CIS, and COBIT standards; produce governance metrics and executive dashboards.
• Third-Party Risk: Evaluate vendor security controls, SLAs, and remediation progress for cloud and outsourced services.
• Incident Response & Resilience: Participate in incident management, lessons-learned reviews, and disaster recovery/business continuity testing.
• Leadership & Collaboration: Mentor team members and partner closely with security, engineering, legal, and compliance teams to embed a culture of secure design.

Qualifications

• 8+ years in technology risk, IT audit, information security, or related functions (financial services experience strongly preferred).
• Proven knowledge of NIST 2.0, FFIEC guidance, CIS Controls, and COBIT frameworks.
• Hands-on understanding of AWS, Azure, and Google Cloud Platform architecture, security services, and shared responsibility models.
• In-depth experience with distributed systems, containers, Kubernetes, and resilient architecture design.
• Proficiency with secure SDLC and DevSecOps practices (SAST, DAST, dependency scanning, CI/CD).
• Exposure to AI/ML risk management, model governance, and related regulatory requirements.
• Familiarity with mainframe environments (e.g., z/OS) and associated control practices.
• Experience conducting technical due diligence and integration planning for M&A.
• Strong IT audit execution and remediation management capabilities.
• Solid grasp of IAM, encryption, monitoring, vulnerability management, and incident response practices.
• Exceptional communication and presentation skills with the ability to translate technical risk for executive audiences.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or related discipline required; advanced degree preferred.

Compensation Range: The salary range for this position is between $160,000 - $210,000. Broadridge considers various factors when evaluating a candidate's final salary including, but not limited to, relevant experience, skills, and education.

Bonus Eligibility: Bonus Eligible

Benefits Information: Please visit for information on our comprehensive benefit offerings. for this role.

All Colorado employees receive paid sick leave in compliance with the Colorado Healthy Families and Workplaces Act and other legally required benefits, as applicable. Apply by clicking the application link and submitting your information. The deadline to apply for this role is 12/18/25.

#LI-PP1

We are dedicated to fostering a collaborative, engaging, and inclusive environment and are committed to providing a workplace that empowers associates to be authentic and bring their best to work. We believe that associates do their best when they feel safe, understood, and valued, and we work diligently and collaboratively to ensure Broadridge is a company-and ultimately a community-that recognizes and celebrates everyone's unique perspective.

Use of AI in Hiring

As part of the recruiting process, Broadridge may use technology, including artificial intelligence (AI)-based tools, to help review and evaluate applications. These tools are used only to support our recruiters and hiring managers, and all employment decisions include human review to ensure fairness, accuracy, and compliance with applicable laws. Please note that honesty and transparency are critical to our hiring process. Any attempt to falsify, misrepresent, or disguise information in an application, resume, assessment, or interview will result in disqualification from consideration.

US applicants: Click here to view the EEOC "Know Your Rights" poster.

Disability Assistance

We recognize that ensuring our long-term success means creating an environment where everyone is welcome, where everyone's strengths are valued, and where everyone can perform at their best. Broadridge provides equal employment opportunities to all associates and applicants for employment without regard to race, color, religion, sex (including sexual orientation, gender identity or expression, and pregnancy), marital status, national origin, ethnic origin, age, disability, genetic information, military or veteran status, and other protected characteristics protected by applicable federal, state, or local laws.

If you need assistance or would like to request reasonable accommodations during the application and/or hiring process, please contact us at or by sending an email to