> Markdown version of [/jobs/ext/2282873-sr-risk-manager-cyber-technology-risk-management](https://www.wearedevelopers.com/jobs/ext/2282873-sr-risk-manager-cyber-technology-risk-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Risk Manager, Cyber & Technology Risk Management - **Company:** Brown Brothers Harriman & Co. - **Location:** Boston, MA, United States - **Experience:** Expert - **Salary:** $140,000.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Technology Audit, IT Management, Cloud Services, Software Security, Cyber Threat Analysis, Information Technology - **Published:** August 28, 2026 - **Apply:** https://bbh.wd5.myworkdayjobs.com/BBH/job/Boston/Sr-Risk-Manager--Cyber---Technology-Risk-Management_72317-1 ## About the Role * Bachelor's degree, equivalent work experience, specialized training in information technology, cybersecurity, risk management, audit, or related discipline. * 10+ years of experience in cyber risk, technology risk, information security, IT audit, operational risk, third-party risk, or a related control function. * Demonstrated experience assessing cyber risk programs, cybersecurity controls, and information security governance frameworks within a regulated financial institution or similarly regulated environment. * Ability to analyze complex risk issues, balance business objectives with control expectations, and communicate practical recommendations to both technical and non-technical audiences. * Strong understanding of cyber and technology risk concepts, control assessment, issue management, remediation tracking, risk acceptance, and risk reporting practices. * Strong knowledge of cybersecurity regulatory requirements and industry frameworks, including NYDFS Part 500, NIST Cybersecurity Framework, ISO 27001, and other applicable cybersecurity or operational resilience standards. * Familiarity with DORA, global operational resilience requirements, and other emerging cyber regulatory frameworks. * Working knowledge of technology environments, including networks, operating platforms, cloud services, application security, and third-party hosted solutions. * Certifications such as CISSP, CISM, and/or CRISC are a plus. This role can be based in either our Boston or Jersey City locations and will be a hybrid role, with a minimum of three (3) days in office. ## Description Cyber & Technology Risk Management is an independent second-line risk function within Enterprise Risk Management (ERM). The group is aligned to the Firm's global Systems/Technology organization and provides risk oversight across a complex financial services environment. The Senior Risk Manager will serve as a trusted second-line advisor, leading a team of cyber and technology risk professionals responsible for identifying, assessing, and helping manage cyber and technology risks that impact the Firm. The Senior Risk Manager is expected to bring broad technical knowledge with expertise in cyber risk management and related regulatory frameworks including information security, cyber resilience, data protection, and regulatory compliance across the Firm's technology environment. This is a senior, highly visible role that partners closely with Systems/Technology management, Application and Data Owners, control owners, Compliance, Internal Audit, Line of Business leadership, and peer leaders across Cyber & Technology Risk Management and ERM to promote sound risk decisions, strong governance, and practical outcomes., What You'll Do * Partner with technology, security, and operations teams to identify, assess, and manage cyber and technology risks. * Provide independent second-line advisory and effective challenge, translating risk considerations into clear, practical guidance. * Lead and/or support risk and control assessments, including cyber risk reviews, RCSAs, application risk assessments, external assurance reviews, and related governance activities. * Evaluate control gaps, risk acceptances, exceptions, and remediation plans; assist stakeholders prioritize actions based on business impact, risk appetite, and regulatory expectations. * Analyze new and emerging risks, including related regulatory requirements and supervisory guidance to identify risk implications and potential gaps; collaborate with control owners on control design, implementation, and measurement. * Support the continued build-out of a new IT governance platform to improve integration, transparency, and execution across Cyber & Technology Risk Management programs. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [Does The Tech Industry Have The Best Work-life Balance?](https://www.wearedevelopers.com/magazine/427-does-the-tech-industry-have-the-best-work-life-balance)