Senior Lead Technology Risk Officer (Application Domain, SDLC, DevOps and AI)

Job summary

The role provides independent second-line oversight of application-domain technology risk, evaluating how application engineering practices and controls contribute to enterprise risk exposure. It leads technical assessments of SDLC, CI/CD, DevSecOps, cloud and software supply chain practices, including AI-enabled engineering workflows, and translates findings into risk statements, remediation expectations, and decision-ready reporting for senior management, risk committees, and regulators.

Qualifications

• 7+ years of Technology Risk experience
• 7+ years of progressive experience in software engineering, DevSecOps, platform or cloud engineering, application security, technology controls, or technology risk
• Proven technical depth across modern SDLC and DevSecOps
• Demonstrated ability to lead complex technical risk assessments, evaluate control effectiveness, identify systemic risk, and provide credible challenge
• Strong command of modern engineering platforms and security toolchains
• Understanding of emerging AI engineering risks and controls
• Knowledge of NIST, SSDF, COBIT, FFIEC guidance, or ISO 27001

Responsibilities

• Provide expert second-line oversight of modern engineering practices
• Own second-line technology risk coverage and provide thought leadership across the application risk domain
• Perform technically rigorous assessments of source control workflows, branching strategies, build systems, test automation, artifact repositories, package dependencies, deployment orchestration, and runtime platform configurations
• Evaluate the integrity of software delivery pipelines end to end
• Lead deep-dive technical risk reviews of complex delivery environments and modernization programs
• Evaluate AI-enabled engineering capabilities
• Develop technically meaningful risk indicators and challenge metrics for SDLC, DevSecOps, and AI-enabled engineering
• Serve as a trusted technical risk partner to engineering, security, architecture, and control teams

Skills

Certifications

Industry

Relocation