Senior Technology & Business Risk Manager

Every team member at Biodesix has the potential to impact our business and our patients, providers, and partners. Even our company logo includes a “thumbprint” – a visual reminder that encourages all team members to put their fingerprints on our future. Explore our openings below and see if your next role is here with Team Biodesix. Thank you for considering us in your search.

Senior Technology & Business Risk Manager

Louisville, CO

1

Senior Technology & Business Risk Manager

Biodesix is a leading diagnostic solutions company, driven to improve clinical care and outcomes for patients. Biodesix Diagnostic Tests support clinical decisions to expedite personalized care and improve outcomes for patients with lung disease.
Biodesix Development Services enable the world’s leading biopharmaceutical, life sciences, and research institutions with scientific, technological, and operational capabilities that fuel the development of diagnostic tests, tools, and therapeutics.

Transform patient care and improve outcomes through personalized diagnostics that are timely, accessible, and address immediate clinical needs.

A world where patient diseases are conquered with the guidance of personalized diagnostics.

The Senior Technology & Business Risk Manager is responsible for leading enterprise technology risk management, business continuity, governance, compliance coordination, and operational resilience activities across the organization. This role oversees risk assessment processes, business continuity planning, control governance, third‑party risk management, audit readiness, and technology risk initiatives that support business operations, cybersecurity objectives, regulatory compliance, and organizational growth. The position partners closely with Infrastructure Engineering, Cybersecurity, Software Development, Business Intelligence, Compliance, Legal, Quality, and business stakeholders to ensure risks are identified, evaluated, communicated, and appropriately mitigated.

This position is designed for a hands‑on technology risk leader capable of assessing cybersecurity, infrastructure, operational, and business risks while helping mature enterprise governance, risk management, and operational resilience programs. The successful candidate must be comfortable operating in a highly technical environment and actively participating in risk assessments, audits, technology reviews, business continuity planning, vendor risk evaluations, control design discussions, and operational resilience initiatives.

• Lead enterprise-wide risk identification, assessment, prioritization, mitigation, and reporting activities across technology and business domains.
• Maintain and continuously improve the enterprise risk register, risk methodologies, scoring models, and governance processes
• Facilitate cross-functional risk assessments involving cybersecurity, infrastructure, applications, cloud technologies, data protection, operational processes, and third‑party services
• Establish risk metrics, key risk indicators (KRIs), dashboards, and executive reporting processes.
• Coordinate risk review activities with business leaders and IT stakeholders to ensure risk ownership and mitigation accountability
• Support risk‑informed decision‑making throughout technology and business initiatives
• Partner with business leaders to identify, assess, and monitor operational, strategic, regulatory, and enterprise risks beyond traditional technology domains
• Drive enterprise risk governance through regular risk reviews, executive reporting, and cross‑functional governance committees

• Partner with Infrastructure Engineering and Cybersecurity teams to evaluate technical risks, control effectiveness, and remediation strategies
• Assess enterprise risks associated with emerging technologies, including Artificial Intelligence (AI), automation, cloud‑native platforms, and evolving digital capabilities
• Support governance activities aligned with NIST CSF, NIST RMF, ISO 27001, SOC 2, HIPAA, SOX and related frameworks
• Assist with root cause analysis, risk…