Asst Dir-Risk Management
Listed on 2025-12-20
-
IT/Tech
Cybersecurity, IT Consultant
At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it.
We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.
If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.
Employment eligibility to work in the U.S. is required, as Moody’s will not pursue visa sponsorship for this position
Skills and Competencies- 6+ years of experience in technology risk management, information security, or IT operations within a large, complex business environment.
- Strong knowledge of risk management frameworks (COBIT, ITIL, NIST), regulatory requirements, and operational risk methodologies.
- Experience designing and implementing controls, conducting risk assessments, and managing remediation activities.
- Understanding of modern software development practices such as Agile, Dev Ops, CI/CD, and sSDLC.
- Excellent analytical, problem‑solving, and communication skills.
- Ability to work independently and collaboratively in a fast‑paced, dynamic environment.
- Proven project management experience.
- Basic understanding of artificial intelligence concepts, with curiosity and enthusiasm for learning how AI tools can be used to improve processes and drive efficiency. Interest in exploring AI systems and a willingness to develop awareness of responsible AI practices, including risk management and ethical use.
Bachelor’s degree in information technology, Computer Science, Risk Management, or related field; relevant certifications (CISA, CISSP, CRISC, CISM, PMP) preferred.
ResponsibilitiesThe Asst Dir‑Risk Management’s primary responsibility will be to provide the conceptual and critical thinking and execution needed to identify, assess, and manage risks within the Data Estate’s technology operations. This role focuses on providing guidance related to risks, creating and executing workflows, and implementing controls to mitigate a range of technology and engineering risks.
Additionally, this role requires a technical background, and the applicant should be familiar with cybersecurity best practices (e.g. identity and access management, change management, system and network security, backup, logging, cloud security, vulnerability management, SDLC, etc.). Must possess the ability to work independently and also as part of a collaborative team.
- Proactively identify and assess risks in technology operations, including IT systems, infrastructure, and processes.
- Design, implement, and maintain effective controls to mitigate identified risks.
- Own and execute risk management activities, including incident response, remediation, and reporting.
- Partner with Dev Ops, cybersecurity, and business teams to embed risk management into operational workflows and ensure alignment with enterprise standards and policies.
- Conduct regular self‑assessments and control testing to ensure effectiveness and compliance.
- Maintain documentation of risk management activities, controls, and remediation plans.
- Report risk issues, incidents, and control gaps to senior management and escalate as necessary.
- Work closely with second line (risk/compliance) and third line (audit) teams to support independent reviews and provide evidence of control effectiveness.
- Foster a culture of risk awareness and operational excellence within technology teams.
Welcome to the Data Estate—where we’re redefining the future of data management and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).