Principal Technology Risk Analyst - Program & Regulatory Assurance at Fidelity Investments

Job Description:Title: Principal Technology Risk AnalystNote: Fidelity will not provide immigration sponsorship for this position. The RoleThe Enterprise Technology Risk group is seeking a passionate, driven and experienced professional to contribute to the Technology Risk Program and Regulatory Assurance CoE team. This role is responsible for performing regulatory and program management responsibilities, including designing and maintaining technology controls to support program and regulatory requirements.  This role will require networking and relationship management skills to collaborate with the Controls Testing team, and various business units and risk teams across the enterprise. You will be working on:Ensuring risk and control taxonomy aligns with enterprise standardsDeveloping and monitoring technology controls for security and complianceProviding technical support and acting as liaison for technology risk managementManaging control updates, annual mapping, and testing requirementsDesign, document, and maintain Risk and Control Matrices (RCMs/RACMs) across business and IT processesContinuously improve and standardize control documentation and governance practicesOverseeing control certification processPartnering with Control Testing team to track progress and remediationRepresenting ETRA in enterprise control initiatives and special projectsSupporting regulatory activities, risk assessments, and examinationsLeading and supporting SOX 404 compliance, including control documentationReviewing SOC reports, assessing CUECs, and communicating control gapsThe TeamThe Technology Risk Program and Regulatory Assurance team is responsible for managing controls to support program requirements, monitoring the results of control testing to meet program requirements, and ensuring a consistent risk and control taxonomy is leveraged in accordance with enterprise best practices. Additionally, this team supports regulatory activities such as maintaining application, server, and database inventories by entity.  Technology Risk is part of the broader Legal, Risk and Compliance group and partners with Corporate Audit, Enterprise Compliance, and Security to protect the interests of our customers, our employees, and Fidelity’s brand. You will also work closely with the Enterprise Technology Risk teams as well as Fidelity technology and business owners, and Operational Risk teams.The Expertise and Skills You Bring5 -7 years’ experience in information technology risk, controls, or audit rolesBachelor’s degree in computer science, technology, or a related field of study preferredProfessional technology and associated risk certifications (CISSP, CISA, CRISC, CISM), Certified risk/fraud examiners (CRE, CFE), and/or Cloud Certification(s) (CCSP, CCSK, AWS) preferredExperience documenting controls for large scale financial service organizations (cloud, distributed, vendor solutions, mainframe, network environments, and AI)Demonstrated technical abilities in multiple areas (e.g., technology infrastructure and application controls, cyber security, access management, network and cloud, resiliency, etc.)Working knowledge of Cloud security and controls and cloud technology environments (AWS/Azure, SaaS, PaaS)You have a strong knowledge of information technology processes and controls, and a comprehensive understanding of risk, quality control and assurance functionsYour love of solving complex problems, and comfort with ambiguous situations, and your ability to help solution innovative ways to mitigate risk using your advanced analytical and critical thinking skillsYour ability to build and maintain collaborative working relationships with Information Technology and Business personnel to design effective controlsYour process orientation and understanding of operations and technology enabling you to provide support in the analysis, development, and monitoring of controlsKnowledge of Industry standards, regulations, frameworks and best practices, such as NIST SP 800-53, COBIT, AICPA Trust Principles, ISO27001, SWIFT, HITRUST, and SOX404 is preferredISO9001 and/or ISO27001 certification preferred, with responsibility to support and participate in ISO peer audit reviews.Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer is preferredYour excellent verbal and written communication skills enabling you to prepare and present recommendations to senior managementNote: Fidelity will not provide immigration sponsorship for this position.Fidelity’s Onsite Working ModelFidelity is transitioning to a full-time onsite working model through a phased rollout across regions and roles. Currently, some roles and locations require 100% onsite presence, while others require less. Onsite expectations are likely to evolve as the rollout continues. This transition does not apply to fully remote roles.Certifications:Category:Information TechnologyPlease be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.SummaryLocation: Merrimack, NH; Smithfield, RI; Westlake, TXType: Full time