United States onlyEmployee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
**This is a 1 year contract to start. Due to the temporary nature of the engagement, this position is not eligible for visa sponsorship.
The Role:
As the Technology Audit Remediation Manager, you will further define and support the company's first line risk management activities across technology functions at SoFi. This high-visibility role will require you to collaborate with cross-functional leaders across all lines of defense to drive technology risk decisions, innovations, and communicate them to senior executives and regulators. Additionally, you will play a key role in ensuring SoFi meets regulatory requirements by fostering and promoting best practices in technology risk management through evangelizing and collaborating with cross-functional stakeholders.
The ideal candidate for this role will have a deep understanding and curiosity of technology risk management and best practices, familiarity with a variety of frameworks (e.g. FFIEC, NIST, ISO, etc.), and strong understanding of technology stack leveraged in cloud environments.. Strong partnership skills, excellent communication and collaboration abilities, and the ability to deliver programs that improve SoFi's overall technology risk posture will be a key to success in this role. This role is a rare opportunity to work with a growing and driven team at a fast-growing and innovative financial technology company.
What you’ll do:
At SoFi, our ambition is to help our members achieve financial independence and reach their goals. We aim to be at the center of our members’ financial lives, and to help every member get their money right. You will be a part of the first line Technology Risk Management team dedicated to driving risk management around our foundational technology which drives forward our mission to help members achieve their financial ambitions.
Key responsibilities:
- Help further define and lead SoFi's technology risk management vision and execution by driving programs, building policies and procedures, and finding solutions for various technology related initiatives
- Partner with key stakeholders across the organization to implement processes that drive down residual risk and improve the overall technology risk posture, working closely with engineering and technology operations teams to establish infrastructure and tooling that enable teams across SoFi to comply with requirements.
- Provide subject matter expertise in Technology Risk and serve as the main point of contact within the organization for Technology Risk Management concepts
- Consume technology and security standards, technology processes, and associated control requirements to support operationalization and deployment
- As needed, oversee plans to address any internally or externally-identified improvement requirements
- Lead cross-SoFi interaction with senior leaders, and lines of defense including Internal Audit and ERM, as they conduct ongoing business monitoring and supervisory activities, exams, audit reviews, and challenge activities
- Establish and implement monitoring protocols and key performance indicators (KPIs) and key risk indicators (KRIs) to measure output related to Technology processes
- Communicate the Data Governance program status to key stakeholders and business leadership.
What you’ll need:
- 10+ years of professional and relevant experience in Technology Risk Management and Technology Risk Consulting, including exposure with a Financial Technology - Framework (FFIEC, NIST, ISO, COBIT, PCI, etc.)
- Bachelors’ Degrees in Computer Science, Systems Engineering, Information Technology or equivalent technical experience
- 6+ years of experience in technology risk governance; handling compliance, technology risk management, and/or internal/external audits.
- Strong risk assessment and process evaluation experience; developing and establishing process flows end-to-end
- First-hand experience working with various technology and governance frameworks (FFIEC, NIST, ISO, COBIT, PCI, etc.)
- Ability to deliver large scale, enterprise-level, cross-cutting programs.
- Strong partnership capabilities and ability to build and foster strong cross-functional work relationships
- Excellent communication skills (verbal, written, and visual); ability to communicate technology and security concepts to both technical and non-technical partners
