Senior Manager, Technology Risk & Recovery

You may choose to display a cookie banner on the external site. You must specify the message in the cookie banner and may add a link to a relevant policy. If you are unfamiliar with these requirements, please seek the advice of legal counsel.

Senior Manager, Technology Risk & Recovery page is loaded## Senior Manager, Technology Risk & Recovery locations:
USA-CA SMO 2220 Colorado Avetime type:
Full time posted on:
Posted Yesterday job requisition :
UMG-24608

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.
** How we LEAD
** UMG's Technology Risk Management Department partners with technology leaders and subject-matter experts across the globe to monitor compliance and manage risks to our technology infrastructure, systems, and data. The Senior Manager of Technology Risk & Recovery is responsible for overseeing technology recovery compliance, governing technology risks, and monitoring third-party compliance through SOC report reviews. The ideal candidate brings deep expertise in technology governance, risk management frameworks, and recovery planning, along with the ability to influence stakeholders at all levels.
** How you'll CREATE
- * Job Responsibilities***
* ** Technology Recovery Program Oversight**:
Manage the end-to-end lifecycle of the technology recovery program, including coordinating with application owners to define recovery time objectives (RTOs) and recovery point objectives (RPOs). Ensure that recovery plans are developed, updated, regularly tested, and that after-action items are tracked through to completion. Implement appropriate mitigation strategies to reduce the organization’s overall technology risk profile.
* ** Tech Business Continuity Program Liaison**:
Partner with the Global Security Office (GSO) to coordinate with critical technology service owners in developing comprehensive Business Continuity Plans. Responsibilities include data collection and analysis, plan development and formalization, integration into Fusion, and establishing strong governance processes for ongoing oversight and review.
* ** Third-Party SOC Report Management**:
Lead the review of vendor SOC 1, SOC 2 and relevant assurance artifacts. Identify control exceptions, deviations, qualifications, or subservice organizations that may introduce risk. Map Complementary User Entity Controls (CUECs) to internal control owners and operational processes. Ensure CUEC obligations are understood and met and identify gaps requiring remediation.
* ** Technology

Risk Management:

** Own and maintain technology risk registers, evaluate risks based on severity and business impact, ensure remediation plans are defined, executed, and reported. Partner with internal leaders to align on risk posture and control expectations.
* ** Internal Advisor**:
Serve as a trusted advisor by providing consultation, guidance, and subject-matter expertise on technology risk topics. Deliver training and awareness sessions and publish monthly newsletter articles to Global Technology teams to strengthen risk understanding and compliance. Champion a risk-aware culture by promoting a proactive risk mindset, building strong cross-functional relationships, and driving grassroots adoption of risk management practices.
* ** Reporting and Metrics**:
Prepare and deliver materials for technology leadership updates and board-level discussions. Develop and report key risk indicators (KRIs) and key performance indicators (KPIs) to measure program effectiveness and progress. Communicate emerging risks and program performance insights to senior leadership. Establish and lead recurring governance forums to ensure ongoing oversight and alignment.
** Bring your VIBE
**** Required
* ** Bachelor’s…