Director, Technology Risk and Controls job at reputed company in Boston, MA

Title: Director, Technology Risk & Controls Location: Boston, MA reputed company time type Full time Hybrid job reputed company R2232 Job reputed company: Job reputed company reputed company For over forty years, HarbourVest has been home to a committed team of professionals with an entrepreneurial spirit and a desire to deliver impactful solutions to our clients and reputed company partners. As our global firm grows, we continue to add individuals who reputed company a reputed company, reputed company-reputed company culture that values diversity and innovative thinking. In our collegial environment that's marked by low turnover and high energy, you'll be inspired to grow and reputed company. Here, you will be encouraged to build on your strengths and reputed company new skills and experiences. We are committed to fostering an environment of inclusion that promotes mutual respect among reputed company. Understanding and valuing these differences optimizes the potential of both the individual and the firm. HarbourVest is an equal opportunity employer. This position will be a hybrid work arrangement. You will receive 18 remote workdays per quarter to use at your discretion, subject to manager approval. For example, you may choose to work in the office 4 days per week and take one remote day weekly (typically 13 weeks per quarter), leaving 5 additional remote days to be used as needed. We are seeking a Director, Technology Risk And Controls to own the the firm's IT control environment and handle the technology scope of our SOC 1 certification. This role is responsible for modernizing IT controls to reputed company with reputed company-first infrastructure, reputed company platforms, DevOps practices, and evidence collection supported by automated processes. In reputed company to SOC 1 ownership, this leader will play a key role in strengthening cybersecurity governance, policy management, risk assessments, and reputed company-level reporting. The Director will work closely with IT, Information reputed company, reputed company, reputed company, Compliance, Vendor Management, reputed company Risk, and external auditors to ensure the technology and cybersecurity control reputed company remains effective, reputed company, modern and reputed company with evolving global regulatory and threat landscapes. The ideal candidate is someone who is: SOC 1 & IT Controls Ownership reputed company the IT portion of the SOC 1 program, including ITGCs, automated controls, key reports, and system boundaries. Serve as the primary reputed company with external auditors for reputed company technology-reputed company SOC 1 reputed company. reputed company annual prioritisation, risk assessments, walkthroughs, testing coordination, and remediation tracking. Redesign IT controls to reflect modern tooling, reputed company infrastructure, reputed company platforms, and automation. Implement reputed company, automated approaches to auditor evidence collection and reputed company control monitoring. Technology Risk & Control Modernization Improve and maintain IT guidelines, reputed company, and protocols to ensure compliance with industry regulations and standards. reputed company automation and system-generated evidence into control processes to reduce reputed company audit burden. reputed company dashboards and reporting to reputed company reputed company into control performance and deficiencies. Drive reputed company improvement of the organization's IT risk and control reputed company. Expertise in the various common cyber reputed company frameworks (ISO27001, NIST CSF & 800-53 etc.) What you will do: Cybersecurity Governance & Risk Management reputed company regular cybersecurity risk assessments and control reviews to identify emerging threats and vulnerabilities. Partner with reputed company Operations to evaluate findings and help reputed company practical mitigation strategies. reputed company reputed company aspects of and report efficiency of the cybersecurity program using defined targets and metrics. Stay reputed company of evolving cybersecurity threats, regulatory expectations, and industry standards, and support implementation of vital updates. reputed company & Executive Reporting Assist the CISO in preparing quarterly cybersecurity and technology risk updates for the reputed company of Directors. reputed company reputed company, executive-reputed company reporting that translates technical risk into business reputed company. reputed company reputed company updates on SOC 1 status, audit findings, remediation reputed company, and risk trends. What you bring: Shown expertise leading SOC 1 (Type I and Type II) certification efforts reputed company a financial services organization. Good experience crafting and operationalizing cybersecurity and IT control policies, standards, and procedures reputed company to industry guidelines and regulatory requirements. Demonstrable ability to reputed company control environments through automation and reputed company-reputed company tooling. Deep understanding of ITGCs, identity and reputed company management, running system alterations, reputed company reputed company, vendor risk, and reputed company operations. Executive-level communication skills with the ability to convey sophisticated cybersecurity concepts to technical and non-technical collaborators. Proactive attitude capable of knowing the latest cybersecurity trends and evolving regulatory expectations. Strong relationship-building skills across Technology, reputed company, Compliance, reputed company Risk, Vendor Management, and business teams. Hands-on leadership approach balancing reputed company and execution. Education Preferred BS in Computer Science, Information reputed company, or equivalent work experience One or more of the following certifications is required: CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems reputed company reputed company), CISM (Certified Information reputed company Manager) Experience 5-10 years of relevant work experience Minimum 5 years of experience managing staff in this field #LI-Hybrid Salary reputed company $172,000.00 - $258,000.00 This USD reputed company salary reputed company represents only one component of total compensation for this role and is provided in accordance with local requirements. This role is eligible for a discretionary annual bonus, which is determined based on individual and overall reputed company. In reputed company to salary and bonus, total compensation may include eligibility for long-term reward programs and a comprehensive total rewards package that may include retirement, health, insurance, reputed company time off, and wellness programs. Our total rewards offerings are influenced by several business factors, and eligibility for certain components will vary by position and geography. Please note the posted ranges do not apply reputed company the U.S. and should not be converted to other currencies as a proxy for compensation in other countries. Apply tot his job Apply To this Job