Eames Consulting Hiring! Full Time Technology Risk Manager – AI - Third-Party Risk in - Ricebowl

An established global investment firm is seeking an experienced risk professional to strengthen its technology risk oversight function. This role providing independent oversight and challenge across technology, third-party and AI supply chain risks.

Key Responsibilities

• Evaluate third-party technology risk exposures, including vendor governance, outsourcing arrangements, cloud services and the effectiveness of security and resilience controls.
• Assess risks associated with external AI solutions, including model providers, data sources, AI platforms and open-source technologies, with emphasis on security, data integrity and responsible usage.
• Provide independent review and constructive challenge of technology risk assessments, control gaps and remediation strategies across key IT and cybersecurity domains.
• Identify emerging supply chain vulnerabilities, vendor concentration exposures and subcontractor risks, translating findings into meaningful risk indicators and management reporting.
• Lead targeted risk assessments and thematic reviews, oversee significant technology-related incidents, and contribute to the continuous enhancement of risk governance practices.

Requirements

• At least 8 years of experience in technology risk, IT audit, risk assurance or a related control function, ideally within financial services or a highly regulated industry.
• Strong track record in third-party risk oversight, vendor assessments, outsourcing governance and technology control reviews.
• Solid knowledge of IT risk frameworks, cybersecurity controls, operational resilience and risk assessment methodologies.
• Understanding of AI/ML technologies and the associated risks relating to external models, data provenance, AI infrastructure and supply chain security.
• Familiarity with relevant regulatory guidelines and industry standards, including MAS technology and outsourcing requirements, NIST AI RMF and ISO standards.
• Excellent stakeholder engagement and communication skills, with the confidence to challenge risk decisions, influence senior stakeholders and work across business and technology teams.

Interested candidates may apply directly or reach out for a confidential discussion.