Risk & Compliance Project Manager and Application Manager

Description

The company is hiring for a dual-remit role: keeping critical risk, regulatory and compliance software running reliably from start to finish, and leading large regulatory technology programs.

The hybrid role sits between risk business units, compliance officers, information security, internal and external auditors, and core IT engineering. You will make sure compliance applications stay reliable, secure and aligned with domestic and global rules such as SOX, GDPR, GLBA, DORA, Basel/FRTB and AML/KYC, while running multi-stream technical projects from inception through delivery.

Responsibilities

• Oversee the health, support model, SLA compliance and full lifecycle of GRC, RegTech and audit platforms.
• Keep risk data pipelines and reporting engines available and resilient, covering performance, disaster recovery, business continuity and observability.
• Run change control boards and release calendars so every configuration change, patch and upgrade stays auditable and causes minimal downtime.
• Lead escalation for high-severity incidents, driving fast recovery, root-cause analysis and preventive control fixes.
• Enforce least-privilege RBAC, segregation of duties and encryption of sensitive data across all managed compliance systems.
• Turn new regulations, industry frameworks and supervisory guidance into application architecture requirements and project roadmaps.
• Act as the main technical contact for internal audit, external regulators and third-party risk assessors, delivering evidence and control test data on time.
• Track and technically remediate audit findings, CAPs, MRAs and vulnerability assessments.
• Design and maintain automated KRIs and KCIs inside application workflows.
• Lead complex regulatory technology and compliance integration projects from scoping and business case through milestones, deployment and handover to operations.
• Coordinate cross-functional sprints, release gates and steering committee meetings using Agile, Waterfall or hybrid methods.
• Manage schedules, resourcing, dependency risks and budgets, including CapEx and OpEx.
• Produce project scorecards, risk burndown charts and executive dashboards for CROs, CCOs and IT leaders.
• Manage relationships with GRC and RegTech vendors and implementation partners, tracking performance against contractual SLAs and SOWs.
• Carry out ongoing third-party technology risk reviews, including SOC report reviews and security posture checks for vendor-hosted applications.

Requirements

• You have 6-8+ years of progressive experience in IT application management, technology project management and technology risk or compliance governance in regulated sectors such as financial services, banking, healthcare or FinTech.
• You have run enterprise GRC or RegTech platforms such as ServiceNow IRM/GRC, Archer, MetricStream, OneTrust, Actimize or proprietary risk calculation engines.
• You have delivered high-stakes regulatory technology projects, handled regulatory examinations and closed audit findings.
• You know major regulatory and control frameworks well, including NIST CSF, ISO 27001, SOX 404, SOC 1/2, GDPR, DORA, FFIEC and PCI-DSS.
• You work confidently with Agile (Scrum or Kanban), Waterfall and ITIL service management, including change, incident, problem and release.
• You understand enterprise software architecture, SQL and non-relational databases, API integration, ETL pipelines and cloud environments on AWS, Azure or GCP.
• You have hands-on experience with Jira, Confluence, MS Project, Smartsheet, Splunk and Datadog.
• You manage stakeholders well, translating between engineers and executives in legal and compliance.
• You negotiate and influence internal business leaders and external regulatory examiners.
• You think analytically, solve problems and pay close attention to precision and evidence.
• You hold a bachelor's degree in computer science, information systems, cyber or information security, finance, risk management or a related field.
• Preferred: a master's degree or MBA.
• Preferred: risk and compliance certifications such as CRISC, CISA, CISM or CRMA; project management certifications such as PMP, PMI-ACP, CSM or SAFe Program Consultant or Agilist; or IT service and architecture certifications such as ITIL v4 Foundation or Managing Professional, TOGAF or AWS/Azure cloud fundamentals. Candidates holding a combination across these areas will get strong preference.

Conditions

Full-time position.

Salary range at the primary location is $145,100.00 - $217,700.00.

Hybrid working model.

Automated tools, including AI, may help match your skills to the role, but people make all hiring decisions.

The company's equal opportunity policy applies to this role.