Skills And Competencies Proven experience in technology risk, operational risk, cybersecurity, or compliance within a regulated or enterprise environment, with expertise in identifying, assessing, and mitigating business and technology risks

Strong knowledge of risk and control frameworks, including ISO 27001, SOC, NIST, COSO, GDPR, and related governance, risk, and compliance practices

Experience managing vulnerability governance processes, validating remediation plans, monitoring control effectiveness, and reducing technology risk exposure

Understanding of application security, secure software development lifecycle (SDLC), security-by-design principles, technical debt management, and infrastructure risk mitigation

Strong analytical, problem-solving, and stakeholder management skills, with the ability to communicate complex technical risks to both technical and non-technical audiences

Experience supporting audits, regulatory compliance activities, customer assurance programs, vendor risk assessments, and GRC platforms such as ServiceNow, Archer, OneTrust, or AuditBoard Education Bachelor’s degree in Business, Risk Management, Computer Science, or a related discipline

Skilled certifications such as CISA, CRISC, CISSP, Security+, or ISO 27001 Lead Implementor/Auditor are preferred Responsibilities Identify, assess, monitor, and report technology, operational, and cybersecurity risks across the Insurance Business Unit to support business objectives and regulatory requirements

Manage vulnerability governance processes, including remediation tracking,



risk treatment validation, escalation management, and control gap closure

Partner with engineering and product teams to embed secure development practices, vulnerability management, secure design principles, and testing standards

Evaluate technology risk drivers, including technical debt, legacy platforms, infrastructure weaknesses, and control deficiencies, while supporting remediation prioritization

Support governance, compliance, and assurance activities through control assessments, issue management, policy reviews, audit coordination, and framework alignment

Contribute to customer assurance and commercial initiatives by supporting RFP responses, vendor assessments, security reviews, and customer due diligence activities

Collaborate with stakeholders across engineering, cybersecurity, legal, compliance, and business teams to strengthen controls and improve risk outcomes

Develop and maintain risk dashboards, metrics, and reporting capabilities that provide actionable insights for decision-making and continuous improvement About The Team The Risk Management team within the Insurance Business Unit serves as the first line of defense, driving the adoption of effective risk management practices and fostering a strong culture of risk awareness. Working closely with engineering, product, and business stakeholders, the team proactively manages technology and operational risks, strengthens control environments, supports regulatory and customer expectations, and enables sustainable business growth.

📌 Asst Dir-Risk Management (Karamba)
🏢 Moody's
📍 Karamba