Overview
We are seeking an experienced technical professional to ensure the resiliency and regulatory compliance of critical third-party technology providers. This role requires expertise in IT architecture, operational resiliency, incident response, and regulatory engagement within highly regulated industries.
Key Responsibilities
- Assess and strengthen resiliency for third-party and SaaS solutions using Well-Architected principles.
- Evaluate vendor architectures for alignment with disaster recovery, business continuity, and high-availability standards.
- Monitor emerging regulations (e.g., DORA, FFIEC, OCC, FCA) and translate requirements into actionable technical controls.
- Collaborate with Enterprise Architecture, Cybersecurity, Risk, and Procurement teams to integrate vendor oversight into enterprise resiliency strategies.
- Document findings, recommend remediation, and report on vendor risk and compliance posture.
Required Qualifications
8+ years in IT infrastructure, application architecture, or cybersecurity within regulated industries.5+ years managing critical third-party technology or SaaS vendors.Direct experience with regulatory exams (OCC, FFIEC, FCA, PRA, DORA, EBA).Strong knowledge of resiliency frameworks (ISO 22301, NIST SP 800-34, FFIEC).Proficiency in cloud / on-prem technologies, network architecture, and data protection.Excellent communication skills for technical and regulatory audiences.Preferred
Bachelor’s degree in Computer Science, Information Security, or related field.Experience conducting SaaS / cloud risk and resiliency assessments.Familiarity with global regulatory bodies and cross-jurisdictional compliance.