Job Description:
The Role
Would you like to join a team focused on Fidelity's Emerging Technology, Start Ups and Incubator programs, specifically Fidelity Private Markets? The Technology Risk team for Enterprise Services (ES) within Enterprise Technology Risk & Analytics (ETRA) group is seeking a passionate, driven, and experienced professional to join the team! This is an opportunity to be involved in the newest and most innovative areas of the firm, including Fidelity Private Shares, an all-in-one equity management platform. You will help enhance and manage the core technology risk program activities, including refining and executing the technology risk strategy and program, and working with Technology, Operations, Legal Risk and Compliance teams to holistically manage technology risk of Enterprise Services and its varied initiatives across the Firm.
The Expertise We're Looking For
- Experience with emerging technology, start-up companies, and cloud infrastructure
- Experience with AI controls, tools usage and evaluation of AI risks
- 8-10 years' experience in information technology risk, cyber security, controls or audit roles
- Bachelor's degree in Computer Science, Technology, or a related field of study preferred
- Demonstrated technical abilities in multiple areas (e.g., technology infrastructure and application controls, cyber security, access management, network and cloud, resiliency, etc.)
- Professional technology risk certifications (CISSP, CISA, CRISC, CISM) and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferred
The Purpose of Your Role
In this position you will act as a consultant and provide expertise in information technology controls design, effectiveness, management and monitoring for new and existing start-ups and incubator programs using emerging technology, including AI.
The Team
You will report to the Technology Risk leader and partner with Operational Risk, Product Teams and Legal, Risk and Compliance associates. The Enterprise Technology Risk team oversees the management of controls, and the mitigation of risk related to the technology environment, systems, and processes across the enterprise. Technology Risk is part of the broader Legal, Risk and Compliance group and partners with Corporate Audit, Enterprise Compliance, and Security to protect the interests of our customers, our employees, and Fidelity's brand. You will also work closely with other ETRA Risk teams and Centers of Excellence as well as Fidelity technology and business owners, Operational Risk teams, and Fidelity external auditors and regulators.
The Skills You Bring
- Your curiosity and desire to support innovative business units in understanding and managing the risk of emerging technologies.
- Your ability to research and quickly get up to speed on new initiative and technologies, see ways to apply existing processes and controls to new situations and mitigate new types of technology risk
- Your willingness to assess and manage technology risks in areas of the firm that are on the cutting edge, supporting the newest product developments and outside of the box activities with a dynamic can do attitude.
- Your love of solving complex problems, and comfort with ambiguous situations, and your ability to help solution innovative ways to mitigate risk using your advanced analytical and critical thinking skills
- Your expert knowledge of information technology processes and controls and a comprehensive understanding of risk and quality control and assurance functions
- Your familiarity with emerging technology, cloud-based platforms, microservices and infrastructure security best practices.
- Your excellent verbal and written communication skills enabling candidate to prepare and present recommendations to senior management
- Your ability to manage multiple projects concurrently and to work under pressure to meet tight time commitments
- Your ability to build and maintain collaborative working relationships with Information Technology and Business personnel to design and assist in the execution of appropriate controls design and monitoring
- Your ability to influence information technology leaders in the effective review and management of controls to mitigate risk in an emerging technology area
The Value You Deliver
- Establishing an IT Risk Strategy and Framework specific to the emerging technology and incubator space, with a focus on business impacts
- Providing advice, guidance, and IT risk program management
- Assessing the various information technology risks that the business faces in its operations and implement action plans, policy and procedural changes for risk avoidance and mitigation
- Conducting in depth information technology risk assessments including identifying and documenting controls, creating detailed process flows, identifying potential gaps and/or inconsistencies and making sound recommendations for improvement and/or mitigation
- Determining appropriate KPIs/KRIs for IT risk monitoring
- Understanding and consulting on information security standards and industry best practices
- Reviewing third party vendors and contracts to ensure appropriate controls are in place and functioning effectively
- Answering questions from internal and external Audit on information technology controls
- Tracking action steps and ensure that findings are remediated appropriately and in a timely manner
- Conducting readiness reviews over large information technology development projects ensuring strong risk management
Certifications:Category:Information Technology
Most roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.
Please be advised that Fidelity's business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
