Senior Technology & Business Risk Manager

 

 

On-Site in Louisville, CO

THE ROLE:

The Senior Technology & Business Risk Manager is responsible for leading enterprise technology risk management, business continuity, governance, compliance coordination, and operational resilience activities across the organization. This role oversees risk assessment processes, business continuity planning, control governance, third-party risk management, audit readiness, and technology risk initiatives that support business operations, cybersecurity objectives, regulatory compliance, and organizational growth. The position partners closely with Infrastructure Engineering, Cybersecurity, Software Development, Business Intelligence, Compliance, Legal, Quality, and business stakeholders to ensure risks are identified, evaluated, communicated, and appropriately mitigated. This position is designed for a hands-on technology risk leader capable of assessing cybersecurity, infrastructure, operational, and business risks while helping mature enterprise governance, risk management, and operational resilience programs. The successful candidate must be comfortable operating in a highly technical environment and actively participating in risk assessments, audits, technology reviews, business continuity planning, vendor risk evaluations, control design discussions, and operational resilience initiatives. 

• Lead enterprise-wide risk identification, assessment, prioritization, mitigation, and reporting activities across technology and business domains. 
• Maintain and continuously improve the enterprise risk register, risk methodologies, scoring models, and governance processes 
• Facilitate cross-functional risk assessments involving cybersecurity, infrastructure, applications, cloud technologies, data protection, operational processes, and third-party services 
• Establish risk metrics, key risk indicators (KRIs), dashboards, and executive reporting processes.  
• Coordinate risk review activities with business leaders and IT stakeholders to ensure risk ownership and mitigation accountability 
• Support risk-informed decision-making throughout technology and business initiatives 
• Partner with business leaders to identify, assess, and monitor operational, strategic, regulatory, and enterprise risks beyond traditional technology domains 
• Drive enterprise risk governance through regular risk reviews, executive reporting, and cross-functional governance committees 

• Partner with Infrastructure Engineering and Cybersecurity teams to evaluate technical risks, control effectiveness, and remediation strategies 
• Assess enterprise risks associated with emerging technologies, including Artificial Intelligence (AI), automation, cloud-native platforms, and evolving digital capabilities 
• Support governance activities aligned with NIST CSF, NIST RMF, ISO 27001, SOC 2, HIPAA, SOX and related frameworks 
• Assist with root cause analysis, risk investigations, control reviews, and corrective action planning 
• Conduct and lead technology risk assessments involving infrastructure, cloud services, enterprise applications, identity and access management, cybersecurity controls, endpoint technologies, and operational technology environments 
• Stay current with emerging cybersecurity threats, regulatory developments, risk management practices, and technology trends 

• Lead development and continuous improvement of the Business Continuity Program 
• Conduct Business Impact Assessments (BIAs) and recovery planning activities across business functions 
• Coordinate tabletop exercises, continuity testing, and resilience validation activities 
• Partner with Infrastructure and Security teams to ensure Disaster Recovery capabilities support business recovery objectives 
• Evaluate operational resiliency risks involving critical business processes, vendors, and technology dependencies 
• Support incident response reviews and lessons-learned activities following significant operational disruptions 
• Coordinate responses to customer security questionnaires, technology due diligence activities, and third-party assurance requests 

• Coordinate readiness activities for internal and external audits including SOC 2, HIPAA, ISO 27001, SOX, and related assessments 
• Partner with business and IT teams to collect audit evidence, validate controls, and track remediation activities 
• Support vendor risk assessments, third-party reviews, and ongoing vendor monitoring activities 
• Assist with policy development, control governance, and risk-related training initiatives 
• Monitor evolving regulatory requirements impacting technology, cybersecurity, privacy, and operational risk programs 
• Maintain documentation supporting governance, compliance, continuity, and risk management activities 
• Partner with Finance, Internal Audit, and business stakeholders to support SOX IT General Controls (ITGCs), application controls, control testing, remediation activities, and audit readiness efforts 
• Evaluate technology, cybersecurity, and operational control effectiveness and recommend improvements to reduce organizational risk exposure 

• Drive maturity improvements across enterprise risk, business continuity, and governance programs 
• Develop and maintain risk management procedures, methodologies, standards, and documentation 
• Drive accountability through governance reviews, risk reporting, mitigation tracking, and issue escalation processes 
• Support audit readiness and control effectiveness activities within regulated environments 
• Provide enterprise leadership by influencing cross-functional teams, facilitating governance forums, and driving accountability for organizational risk management activities 
• Foster a collaborative, risk-aware, and business-focused culture across the organization 
• Oversee the enterprise technology policy governance process, including policy lifecycle management, periodic reviews, and alignment with regulatory and business requirements