Operational & Technology Risk Lead

Operational & Technology Risk Lead

This role is open to candidates in the following locations:
New York City, NY or Chicago, IL - Hybrid

Reporting to the Head of Risk Management, the Lead of Operational & Technology Risk owns the enterprise operational and resiliency risk program across a regulated, globally distributed brokerage platform.

This is a builder's role. You will design the operational risk framework, including the enterprise risk taxonomy and appetite structure, stand up risk assessment and control assurance programs, own issue and risk event management, and build AI-native tooling that makes risk management faster, sharper, and practical for the people who actually own it.

Success requires someone who thrives with autonomy, builds risk practices that hold up under scale and regulatory scrutiny while still letting the business move quickly, and can translate operational risk into decisions the business, executives, and the Board will act on. You will partner closely with Engineering, Product, Operations, Treasury, Security, Legal, and Compliance, which separately owns programs that integrate with the firm-wide operational risk framework.

Build and Own the Operational Risk Framework

• Build the enterprise operational risk taxonomy, risk appetite statements, and supporting policy architecture.
• Establish and lead the operational risk and resiliency forum, driving genuine challenge and alignment rather than status review.
• Produce reporting to the Global Risk Committee and the Board that carries a clear point of view and prompts decisions.
• Establish decision frameworks, escalation thresholds, and exception governance that hold under regulatory and partner scrutiny.

Get Ahead of Change, New Products, and New Markets

• Own risk assessment for new products, partners, markets, and platform capabilities, including emerging asset classes, tokenized securities, and international market entry.
• Build a change risk process that accelerates safe launches rather than create unnecessary friction.
• Establish and run the RCSA program across a global, partner-dependent operating model.
• Serve as a risk advisor to Operations, Product, Security, and Engineering leaders throughout the product development lifecycle.

Set the Enterprise Standard and Assure Controls

• Own the enterprise methodology every risk program conforms to, including taxonomy, rating scale, assessment approach, defense in depth control framework, and KRI design conventions.
• Build the operational control testing program covering ICOC and key operational controls, including methodology, sampling, deficiency classification, and remediation tracking to closure.
• Aggregate output from programs executed by other assurance functions into a single enterprise risk picture, and challenge results that do not reconcile.
• Own operational resiliency, business continuity, and disaster recovery, recognizing Drive Wealth is itself critical infrastructure to its partners.

Close the Loop on Issues, Risk Events, and Indicators

• Own enterprise issue management end to end, including methodology, intake, classification, corrective action, aging thresholds, and escalation.
• Build the risk event and loss database, lead root cause analysis on material events, and ensure learnings feed back into risk assessments and control design.
• Design a KRI framework tied to how the platform actually runs, including trade and settlement volume, availability, partner onboarding, and operational capacity.

Build AI-Native Tooling and Enablement for Risk Practices

• Use automation and AI to move control testing from sample-based toward full-population where the data supports it, and to automate evidence collection and exception triage.
• Build risk tooling first-line owners genuinely want to use, and treat low adoption as a design failure rather than a compliance problem.
• Scale the program through tooling leverage rather than headcount.

Lead, Scale, and Develop the Team

• Hire, coach, and develop a team of technically fluent risk professionals, setting a high bar for ownership, judgment, and execution.
• Build a risk champion network across first-line functions so the program scales through the business.
• Build a culture of…