Overview In this role, you contribute to Fidelity's Technology Risk team by identifying and monitoring controls, conducting risk assessments for applications and services, and supporting audits and regulatory compliance. You will collaborate with cross-functional partners to manage IT risk, including SOC audits and ITGC activities, while supporting strategic risk initiatives. The work helps protect customers and Fidelity's brand through rigorous risk management and governance. You will engage with auditors, regulators, and internal stakeholders to drive risk-informed decisions.
Responsibilities- Identify and monitor controls and report on their effectiveness
- Perform technology risk assessments for applications, platforms, and services
- Support regulatory compliance and internal/external audits (SOC 1, SOC 2, ITGC)
- Assist in risk management activities for BU functions and risk partners
- Contribute to control testing, risk consulting, and management reporting
- Support ad-hoc strategic risk projects and requests from Operational Risk partners
- Establish ongoing control monitoring cadence
Key requirements- 2 years in Risk, Compliance, Information Security, Information Technology, Controls or Audit roles
- Bachelor's degree or equivalent experience in Computer Science, Risk Management and Assurance, Cyber Security, or related field
- Technical capabilities across multiple areas (infrastructure, application controls, cybersecurity, access management, cloud, resiliency)
- Knowledge of Azure, AWS, ALM software, SaaS
- Proven record of analyzing and/or supporting risk programs
- Ability to communicate risk programs to external auditors and regulators
- Professional technology risk certification or interest (e.g., CISSP, CISA, CRISC, CISM)
- Demonstrated risk management knowledge including risk assessment and control evaluation
- Strong problem-solving and critical thinking abilities
- Clear and direct written and oral communication
- Ability to build strong relationships and influence partners
- Strong communication skills
- Relationship building and influencing others
- Problem-solving and critical thinking
- Technology infrastructure and application controls
- Production support
- Cybersecurity
