Sr Manager - Technology Governance and Risk
Listed on 2026-01-12
-
IT/Tech
Cybersecurity, IT Business Analyst, Data Security, Information Security
Please reference the schedule and minimum qualifications listed below before applying.
If you need assistance with filling out our application form or during any phase of the application, interview, or employment process, please notify our Human Resources Team at option 1 or email and every reasonable effort will be made to accommodate your needs in a timely manner.
Job SummaryThe Senior Manager, Technology Governance & Risk leads a high‑performing team of analysts across technology, cybersecurity, and data governance and risk domains. This role is responsible for helping to develop and execute a strategic vision for governance and risk management, building and maturing programs that align with enterprise objectives, and driving measurable outcomes through Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and Risk and Control Self‑Assessments (RCSAs).
The ideal candidate is a collaborative leader with deep expertise in risk frameworks, program development, and cross‑functional engagement.
Mountain America Center - Hybrid:
9800 S Monroe St
Sandy, UT 84070
Full Time
To be effective, an individual must be able to perform each job duty successfully.
Leadership & Strategy- Lead and mentor a team of governance and risk analysts across technology, cyber, and data domains.
- Develop and communicate a clear vision for governance and risk management aligned with enterprise strategy.
- Foster a culture of accountability, continuous improvement, and risk‑aware decision‑making.
- Build and mature governance and risk programs, including policy frameworks, control libraries, and risk assessments.
- Oversee the implementation and evolution of KRIs, KPIs, and RCSAs to monitor and report on risk posture.
- Partner with internal stakeholders to ensure governance practices are embedded in technology and data initiatives.
- Deep familiarity and experience working in a three lines of defense environment at a financial institution or credit union.
- Identify, assess, and monitor risks across technology, cybersecurity, and data environments.
- Facilitate risk workshops, control testing, and issue remediation tracking.
- Ensure alignment with regulatory requirements, industry standards, and internal policies.
- Collaborate with business units, compliance, audit, and legal to ensure integrated risk management.
- Work closely with our 2nd and 3rd line business partners to take a practical governance and risk‑based approach to maturity across the credit union.
- Present risk insights and program updates to senior leadership and governance committees.
- Serve as a trusted advisor on governance and risk topics across the organization.
- Drive process improvements and automation opportunities within governance and risk workflows.
- Maintain documentation, dashboards, and reporting mechanisms to support transparency and decision‑making.
- Support incident response and issue management processes from a governance perspective.
- Bachelor’s degree in Information Systems, Cybersecurity, Risk Management, or related field (Master’s preferred).
- 8+ years of experience in technology governance, risk management, or cybersecurity.
- 3+ years of leadership experience managing teams or programs.
- Strong understanding of risk frameworks (e.g., NIST, COBIT, ISO 27001, FFIEC).
- Experience with KRIs, KPIs, RCSAs, and control testing methodologies.
- Excellent communication, collaboration, and stakeholder management skills.
- Visionary mindset with the ability to translate strategy into actionable programs.
- Proven ability to lead through influence and drive cross‑functional alignment.
- Analytical thinker with a strong grasp of risk metrics and reporting.
- Comfortable navigating ambiguity and driving clarity in complex environments.
- Certifications such as CRISC, CISM, CISSP, CGEIT, or similar are a plus.
- Responsible for a business process in a staff function
- Directs team and manages operational activities
- Operates with autonomy on operational matters,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).