> Markdown version of [/jobs/ext/2769760-director-technology-risk-and-business-continuity](https://www.wearedevelopers.com/jobs/ext/2769760-director-technology-risk-and-business-continuity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Technology Risk and Business Continuity - **Company:** United Nations - **Location:** New York, NY, United States - **Experience:** Experienced - **Salary:** $150,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Data Integrity, Disaster Recovery, Identity and Access Management, IT Management, Microsoft Office, Cyber Threat Analysis, Information Technology, Data Management, Cloud Migration - **Published:** September 7, 2026 - **Apply:** https://www.disabledperson.com/jobs/74950888-director-technology-risk-and-business-continuity ## About the Role * Bachelor's degree in Risk Management, Information Systems, or related field* 10+ years of experience in a financial services environment with exposure to regulated environments, including a minimum of 4 or more years in a second line or commensurate risk function* Experience in technology, cyber, and operational resilience risk management, including regulatory compliance, risk identification, monitoring, issue management, risk reporting, and cross-functional collaboration with business partners. * Demonstrated ability to provide independent challenge to senior stakeholders, translate technical risks into business and financial impacts * Strong knowledge of enterprise risk management, financial services regulations (e.g., NCUA, FFIEC, OCC), the three lines of defense model, and technology, cyber, and emerging AI risk frameworks (e.g., NIST, ISO, COBIT). * Proficient in Microsoft Office, particularly Excel, with sound risk judgment, analytical skills, and the ability to provide independent, objective oversight. * Strategic thinker with strong digital, cyber, and AI risk awareness, capable of balancing governance, partnership, and practical business solutions. * Exceptional executive communication and influencing skills, with the ability to build relationships and drive outcomes without direct authority, including presenting to senior leadership and the Board. What makes you stand out * Technology Risk Management experience * Excellent communication skills ## Description Oversee IT, Information Security, and Business Continuity/Disaster Recovery (BCP/DR) risks across the credit union. Partner with technology and business leaders within the three lines of defense framework to provide independent oversight and advisory support, ensuring technology risks are effectively managed and aligned with the organization's risk appetite, regulatory expectations, and strategic objectives. Serve as the primary liaison between Enterprise Risk Management and technology leadership to promote transparency, resilience, and informed risk-based decision-making., Technology and Emerging Risk Oversight* Regardless of seniority or role, uphold UNFCU's mission, core values, and guiding principles by providing an exceptional service experience to colleagues and members alike through consistent demonstration of our service excellence behaviors. * Provide independent second-line oversight of Information Technology, Information Security/Cyber, AI, technology resilience, and infrastructure risks, ensuring effective governance across the organization. * Assess and challenge first-line risk assessments, control effectiveness, and mitigation strategies related to core systems, cloud adoption, data management, AI, automation, and third-party technology risks. AI Risk and Governance * Provide independent oversight of AI governance, including AI use cases, model lifecycle controls, decision-support frameworks, and risks such as bias, explainability, data integrity, and misuse.* Partner with technology and business leaders to ensure AI initiatives align with regulatory requirements, governance standards, ethical principles, and effective management of financial, operational, and reputational risks. Information Security Risk Governance* Partner with Information Security leadership to provide independent oversight of cyber risk management, including security incidents, identity and access management, data protection, threat and vulnerability management, and alignment with regulatory and industry standards. Business Continuity & Disaster Recovery Oversight* Provide independent oversight of the organization's Business Continuity and Disaster Recovery (BCP/DR) frameworks, including scenario design, testing effectiveness, recovery objectives (RTO/RPO), and operational resilience.* Partner with first-line technology leadership to review and challenge BCP/DR strategies, testing results, remediation efforts, and readiness for technology failures, third-party disruptions, and other resilience scenarios. Risk Identification, Monitoring, and Reporting* Develop and maintain the technology and operational resilience risk framework, including key risk indicators (KRIs), thresholds, and enterprise-wide risk integration.* Monitor and escalate material IT, cyber, and resilience risks to executive leadership and the Risk Management Committee through effective reporting and governance. Governance and Cross-Functional Coordination* Serve as the primary Enterprise Risk Management liaison to IT leadership, business lines, and operational teams, fostering effective collaboration and risk governance. * Provide independent second-line oversight by challenging first-line risk ownership and supporting key governance forums, including technology, product, and incident management committees. Issue Management and Continuous Improvement * Partner with first-line stakeholders to identify technology-related issues, validate root causes and remediation plans, and monitor corrective actions through resolution. * Support the Issue Management Program by ensuring technology risks are documented, tracked, and resolved in compliance with regulatory requirements and the organization's Code of Ethics and Business Conduct. ## Related Videos - [Responsible AI @ Microsoft - Governance, Standards, Learnings](https://www.wearedevelopers.com/videos/1544-responsible-ai-microsoft-governance-standards-learnings) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Exploring 5 Key Applications of AI Abundance with Blockchain Assurance](https://www.wearedevelopers.com/videos/971-exploring-5-key-applications-of-ai-abundance-with-blockchain-assurance) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [From Uncertainty to Empowerment: Personalizing the Human Experience with AI](https://www.wearedevelopers.com/videos/1484-from-uncertainty-to-empowerment-personalizing-the-human-experience-with-ai) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)