Head of Cyber & Technology Risk

At BBH, partnership is more than a form of ownership—it’s our approach to business and relationships.

Enterprise Risk Management is hiring a Head of Cyber & Technology Risk to strengthen the technology risk and control environment that protects the firm’s systems, data, and operations.

• Strategic leadership & executive advisory: Serve as a senior advisor to Technology leaders on cyber and technology risk across known issues, evolving threats, and emerging technologies; influence enterprise strategy; anticipate regulatory expectations; represent Cyber & Technology Risk on firm-wide committees; own and continuously enhance the risk program; lead risk reviews for new products and services; coordinate external assurance activities; partner with Internal Audit, Compliance, and Legal.
• Policies, standards & enablement: Maintain and enhance technology risk policies and standards; contribute to AI governance; design and deliver risk and control training; partner with Information Security to refresh security awareness content.
• Leadership, talent & engagement: Build trust-based relationships across Technology; set priorities and operating rhythm for the team; develop talent with strong business acumen; hire, coach, and manage performance; foster a culture of intellectual curiosity and continuous improvement.

• 15+ years of experience in technology risk management, technology audit, controls, or a related discipline within financial services or another highly regulated environment.
• Bachelor’s degree required; advanced degree preferred.
• Certifications such as CISSP, CISM, or CRISC are a plus.
• A proven, senior-level risk leader able to advise and challenge Technology executives.
• Demonstrated ability to influence at the enterprise level and shape strategy.
• Track record of building and leading high-performing teams and developing future leaders.
• Deep knowledge of risk management concepts, frameworks, and assessment methodologies.
• Strong technical fluency across IAM, network and endpoint controls, data platforms, legacy environments, cloud, and AI-enabled capabilities.
• Demonstrated information security experience and a working understanding of the cyber threat landscape.
• Strong understanding of IT regulatory expectations and compliance requirements.
• Ability to balance business priorities with risk considerations and communicate tradeoffs clearly.
• Excellent relationship management and executive communication skills; able to simplify complex topics.
• Experience coordinating cross-location initiatives and aligning stakeholders across functions and geographies.

$170,000 - $230,000 base salary plus annual target bonus. Base salary is subject to location, skill, experience, and qualification.

BBH’s total rewards package includes base salary, discretionary bonuses, profit‑sharing; benefits that enhance experience, including long‑term savings, healthcare, income protection, professional development opportunities, and time off.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.