Technology Risk Lead

Position Overview Harris Williams will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Job Description We are a global investment bank specializing in M&A and private capital advisory services. Clients worldwide rely on us to help unlock value in their business and turn ambitious goals into reality. We approach every engagement with boundless collaboration, pooling expertise and relationships across industries, service offerings, and geographies. For over 30 years, our clients have trusted us to think strategically, execute precisely, and deliver premium outcomes to help them grow.

We are ambitious in our goals and steadfast in the belief that clients deserve our very best. To achieve our highest aspiration, we invest in world-class, team-oriented individuals who are smart, driven, and principled – those who are eager to be part of something bigger than themselves. When you join Harris Williams, you are welcomed into a collegial environment where every individual has the opportunity to make an impact in a powerful and significant way.

We invite you to learn more about careers at Harris Williams.

The Role:

Within Harris Williams Compliance and Risk team, the Technology Risk Lead will be an integral individual contributor to the IT security team, focused on key programs and initiatives that enable us to effectively identify and reduce risk to the firm. This role will leverage depth in technology risk management to partner across multiple organizations, developing and supporting risk solutions that protect our firm, our clients and our ability to remain a market leader.

Why This Role is Unique Opportunity to own and mature the technology risk program within a growing, highly visible platform

Direct exposure to senior leadership and parent company stakeholders (PNC)
Ability to shape risk strategy across emerging areas such as AI, data governance, and vendor risk

A role that blends strategy, execution, and influence—with meaningful impact on how the firm operates

Core Responsibilities:

Technology risk and compliance management:

Primary lead for all Harris Williams Technology risk and compliance efforts and initiatives, supporting the CTO, CCO and their designees in successful management of the IT risk portfolio and identified priorities.

Manage and track a consolidated program for all interactions between Harris Williams IT/Security and PNC teams (meetings, control schedule, KRIs, assessments, etc.). Outline strategic roadmap for the Technology Risk program (platforms, people, processes).Develop deep familiarity with parent company structure, as a liaison with all lines of defense to organize compliance cycles, execute controls and measure performance towards subsidiary risk management objectives.

Continually seek to identify opportunities for improvement and efficiency.

Function as Subject Matter Expert around technology risk and the proper application of technical and procedural risk principles to enterprise IT environments and practices.

Coordinate and lead the firm’s response for IT assessments and inquiries, prepare agendas and materials, record and track action items to closure with Harris Williams IT, parent company counterparts, auditors and regulators.

Evaluate and consult on the risks associated with strategic priorities or major programs and projects, formulating targeted recommendations and guidance.

Collaborate and partner with the business and key stakeholders in creating recommendations to ensure alignment with defined priorities.

Regularly prepare and deliver comprehensive program updates regarding portfolio prioritization, progress, trends and effectiveness.

Establish and maintain technology risk register and related security and compliance maturity frameworks. Lead the identification, assessment, and prioritization of technology risks across the organization's IT landscape.

Own and lead the lifecycle for IT policy and procedure inventory management. Focus efforts on key areas of primary broker dealer risks, including security and privacy of firm, employee and client information, data classification, vendors, and AI.Primary IT risk owner for ensuring…