> Markdown version of [/jobs/ext/2116990-associate-director-embedded-risk-manager-application-development](https://www.wearedevelopers.com/jobs/ext/2116990-associate-director-embedded-risk-manager-application-development). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Director, Embedded Risk Manager - Application Development - **Company:** Talon - **Location:** Jersey City, NJ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Confluence, JIRA, Systems Development Life Cycle, Release Management, Power BI, Secure Coding, Software Engineering, Systems Integration, Tableau (Software), Working Model 2D, IT General Controls (ITGC), Large Language Models, RSA Archer Platform, Devsecops, Servicenow - **Published:** August 19, 2026 - **Apply:** https://www.dice.com/job-detail/d3245abc-61b8-4b61-8a89-ae3169f9af4e ## About the Role * Minimum of 8+ years experience in technology risk, application development risk, IT controls, cybersecurity risk, or related fields within a complex environment. * Deep knowledge of the software development lifecycle (SDLC), application controls, change management, and secure development practices. * Proven ability to support audit readiness, issue management, remediation planning, and risk reporting processes. * Strong stakeholder management skills capable of influencing senior application development and risk stakeholders. * Experience analyzing risk, controls, audit data, incidents, and remediation activities to derive actionable insights. * Familiarity with GRC platforms like Archer, ServiceNow, Power BI, Tableau, Jira, or Confluence is advantageous. * Excellent verbal and written communication skills with the ability to produce clear, concise risk reports and executive summaries. Nice to Have Skills * Experience in financial services, banking, insurance, or regulated industries. * Knowledge of DevSecOps, secure SDLC, change, and release management. * Familiarity with AI, large language models, and automation for risk insights and control analysis. * Professional certifications such as CRISC, CISA, CISM, CISSP, CGEIT, ITIL, or SAFe. Preferred Education and Experience * Bachelor's degree is required. * Extensive experience in technology and application development environments, ideally in highly regulated sectors. Other Requirements * This role requires a hybrid working model with three days onsite at our Jersey City location. * Candidates must possess a strong understanding of risk culture cultivation and proactive control issue identification. Eager to leverage your expertise at a dynamic organization committed to operational excellence? Apply now and take the next step in your career to drive meaningful risk management solutions! ## Description Join a leading organization as an Embedded Risk Manager within the Application Development space, where your expertise will be pivotal in integrating risk management practices into the software development lifecycle. This critical role involves collaborating with development teams, risk stakeholders, audit professionals, and external partners to strengthen controls, enhance risk awareness, and promote a robust risk culture. If you are passionate about technology risk, have a proven track record in audit and control management, and thrive in complex, regulated environments, this opportunity offers a platform to make a significant impact in shaping effective risk strategies and ensuring operational resilience. ## Related Videos - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)