Tech Risk and Controls Lead - Cloud Foundational Services - Governance

Job description

Own and deliver executive-ready materials (PowerPoint and written narratives) for control governance forums, ensuring they present a clear, accurate, and independent view of the product line's technology risk posture, control health, and open exposures. Lead the end-to-end meeting production process by setting timelines, requesting inputs, tracking actions, managing deadlines, maintaining version control, and ensuring materials are complete, accurate, and submitted on time while escalating delivery risks appropriately.

Own issue and action-plan management as a discipline — driving prioritization, action-plan definition, progress tracking, and validation of remediation outcomes, and challenging owners where remediation is insufficient or overdue. Define, monitor, and report on control metrics, KRIs, and KPIs that measure control effectiveness, surfacing trends, thresholds breached, and the "so what" for senior management. Synthesize complex inputs into decision-oriented insights and storylines, articulating changes, impacts, key risks and controls, dependencies, decisions required, and recommended actions.

Provide high-level review and quality assurance on metrics commentary, issue trackers, and risk and control updates, applying professional judgment to test whether they hold up to scrutiny. Maintain and enhance recurring reporting and meeting artifacts — templates, trackers, action logs, minutes, and follow-up items — while identifying opportunities for process improvement and standardization. Partner across lines of business and functions, and lead through influence, to strengthen governance routines and deliver effective oversight across the product line.

Leverage enterprise-authorized AI and automation capabilities to accelerate the drafting, synthesis, and quality review of governance content — reducing manual effort while applying human validation and handling data in line with sensitivity and security requirements. Required Qualifications, Capabilities, and Skills Experience in technology risk, controls, governance, or a related field, including supporting senior leadership and control governance forums.

Working knowledge of technology risk and control concepts — control design and operating effectiveness, issue and action-plan management, and remediation validation — with the judgment to test whether risk and control representations hold up to scrutiny. Familiarity with cloud risk and control concepts and the risks specific to a public cloud environment. Experience defining, monitoring, and reporting control metrics, KRIs, and KPIs, and translating them into meaningful insight for senior audiences.

Advanced PowerPoint skills with strong executive storytelling capabilities and the ability to translate complex technical topics into clear, senior-level narratives. Strong report creation and presentation skills, capable of speaking credibly to all levels of the organization. Demonstrated ability to lead cross-functional meetings and engage diverse line-of-business, control, and technology stakeholders. Exceptional organizational and execution skills, with the ability to manage multiple deliverables, tight deadlines, and diverse stakeholder groups.

Strong analytical and quality assurance skills, including experience working with metrics, issue tracking, and reporting tools. Strong written and verbal communication skills, with the ability to build relationships, drive input collection, and navigate competing viewpoints. Experience using enterprise-authorized AI capabilities to support risk, controls, or reporting workflows — validating outputs before use, escalating when uncertain, and applying awareness of data sensitivity and auditability.

Demonstrated adaptability, ownership, and a continuous improvement mindset while consistently delivering high-quality work. High attention to detail, strong professional judgment, and the ability to handle sensitive information with discretion. Strong control and governance mindset.