Principal Technology Risk Analyst

Job Description :

Enterprise Technology Risk & Analytics (ETRA) is seeking a passionate, driven, and experienced technology professional to join our team.

The Role

The individual in this role will be based in Merrimack, Boston, Smithfield, or Westlake and report to the Director of Technology Risk for Advanced Process Solutions (APS), Customer Contact Center (EC3) and Enterprise Infrastructure & Operations (EI&O), within ETRA. The individual will work closely with our business units, Internal Audit, Risk, Information Security Officers (ISOs), and Fidelity external auditors and regulators.

You will work closely with various ETRA Centers of Excellence (COEs), perform proactive risk and control assessments, monitor technology controls, document and oversee remediation plans, participate in corporate audits, and provide External Audit support. You will be responsible for monitoring and escalating business impacting incidents to ETRA and LRC senior leaders and develop / maintain associated reporting.

This is also a great opportunity to work closely with the BU Technology teams on emerging technologies supporting modernization efforts.

The Expertise You Have

• 5-8 years of experience in information technology risk management, audit and / or compliance, or cybersecurity with significant experience in information technology controls review; experience in financial services audit organization preferred
• BA / BS, preferably in technology or related field of study
• Demonstrated technical abilities in multiple areas (e.g., technology infrastructure and application controls, cybersecurity, access management, resiliency, data loss prevention (DLP), network, cloud, etc.)
• Experience performing technology risk assessments, control assessments or IT Audits
• Ability to represent complex programs to external auditors and regulators
• Experience or knowledge of cloud-based deployments, DevOps, and associated risk / controls and auditing requirements preferred
• Expertise and hands-on experience in ITSM processes, at an enterprise level
• Professional technology risk certifications or interest in pursuing (CISSP, CISA, CRISC, CISM) preferred

The Skills You Bring

The Value You Deliver

The Team

The Technology Risk team oversees the management of controls, and the mitigation of risk related to our technology infrastructure and processes, focusing on protecting the interests of our clients, customers, employees, and company. Our team's focus is technology risk the for EI&O Business unit.

Note : Fidelity is not providing immigration sponsorship for this position

Certifications : Category : Information Technology

Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.

Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and / or associating with individuals with certain Criminal Histories.