Tech Risk Management Consultant

Role: Tech Risk Management Consultant

Location: Remote

Job Type: Full-Time

Salary Range: $100,000-$110,000 per year

Job Description

We are seeking an experienced Tech Risk Management Consultant to assess, manage, and monitor technology and cybersecurity risks across applications, infrastructure, cloud platforms, and AI-enabled solutions. The ideal candidate will have strong knowledge of IT risk frameworks, security controls, regulatory compliance, risk assessments, and Governance, Risk, and Compliance (GRC) tools.

The consultant will collaborate with Security, Engineering, Infrastructure, Compliance, Audit, and Business teams to identify control gaps, support audits, manage remediation activities, and strengthen enterprise technology risk governance.

Experience in Technology Risk Management, IT Risk, Cyber Risk, Information Security, Audit, or GRC.

Strong knowledge of risk frameworks:

NIST Cybersecurity Framework (CSF)

NIST 800-53

ISO 27001/27005

COBIT and COSO

SSAE 18/SOC

Experience conducting technology risk assessments, cyber risk assessments, control testing, security reviews, and Risk & Control Self-Assessments (RCSA).

Knowledge of information security, cloud security, application security, infrastructure security, and data protection controls.

Experience managing risk registers, risk treatment plans, exceptions, issues, and regulatory compliance.

Experience with third-party and vendor risk assessments.

Hands-on experience with GRC tools such as Archer, ServiceNow GRC, OneTrust, or MetricStream.

Knowledge of SOX, PCI-DSS, GDPR, and CCPA requirements.

Understanding of AWS, Azure, Eligible to workP, and associated cloud risk management practices.

Strong stakeholder management, reporting, and executive communication skills.

Conduct technology and cyber risk assessments across applications, infrastructure, cloud platforms, and AI-enabled solutions.

Identify, assess, document, and monitor technology risks and control gaps.

Evaluate control design and operating effectiveness.

Maintain enterprise risk registers and risk treatment plans.

Collaborate with Security, Engineering, Infrastructure, Compliance, Audit, and Business teams to assess and mitigate risks.

Evaluate cloud, AI, application, infrastructure, and third-party risks.

Assess compliance with corporate security policies, standards, and regulatory requirements.

Support audits, regulatory reviews, and compliance assessments.

Track remediation activities and validate the closure of identified risks and control deficiencies.

Develop risk metrics, dashboards, and executive reports for senior management.

Review new technologies and AI solutions for operational, security, privacy, and compliance risks.

Support enterprise risk governance, policy development, and risk reporting processes.

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.