Principal Tech Resiliency

At Early Warning, we've powered and protected the U.S. financial system for over thirty years with cutting‑edge solutions like Zelle, Paze, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions are located in Scottsdale, San Francisco, Chicago, or New York and follow a hybrid work model to allow for a more collaborative working environment.

Potential candidates must independently possess the eligibility to work in the United States at the time of hire. This position is ineligible for visa sponsorship.

Provides independent second‑line oversight, assessment, and credible challenge of first‑line technology risk management activities across the company specific to Resiliency Management. Partners across Technology, Security, Product, Data, and other business functions to evaluate risk and control practices, including risk assessments, issues management, control validation, key risk indicators, governance reporting, and escalation. Helps ensure technology‑related risks are managed consistent with enterprise risk appetite, regulatory expectations, and sound industry practice.

May support one or more focus areas based on business need, including Enterprise Technology Risk, Data Security Risk, Access Management Risk, Offensive Security Risk, Vulnerability Management Risk, AI Security Risk, and Asset and Inventory Management Risk.

• Provide independent review, oversight, and credible challenge of first‑line resiliency risk management activities, controls, and decisions.
• Evaluate the design and execution of risk management practices to ensure alignment with enterprise frameworks, policies, regulatory expectations, and relevant industry standards.
• Provide independent challenge and oversight of risk identification and assessment activities.
• Review and challenge risk and control self‑assessments, issues management, remediation plans, control validation outcomes, and key risk indicators.
• Assess the adequacy of severity ratings, root cause analyses, action plans, and closure evidence for technology‑related issues and risk events.
• Identify risk trends, concentrations, and emerging themes through analysis of risk data, governance materials, and business changes; develop an independent view of risk exposure and control effectiveness.
• Prepare and support reporting, escalation, and discussion materials for senior leaders, governance forums, and risk committees.
• Partner with first‑line leaders, subject matter experts, and independent testing or validation teams to improve clarity of control expectations, testing scope, and evidence requirements.
• Provide ongoing risk advisory support while maintaining second‑line independence and accountability for effective challenge.
• Recommend opportunities to strengthen risk awareness, governance routines, and training that improve technology risk management maturity.
• Support the company's commitment to risk management and protecting the integrity and confidentiality of systems and data.

• Assess the maturity and effectiveness of Technology Resilience capabilities across critical technology services, infrastructure, applications, cloud environments, and end‑user computing.
• Evaluate resilience lifecycle processes, including disaster recovery planning, backup and recovery, service continuity, technology recovery, and resilience by design.
• Review business impact analyses, recovery strategies, recovery time objectives (RTOs), recovery point objectives (RPOs), and dependency mapping for critical technology services.
• Evaluate the design, coverage, and outcomes of resilience testing programs, including disaster recovery exercises, failover testing, tabletop exercises, and simulation activities.
• Assess resilience considerations relating to third‑party technology providers, cloud services, and critical technology dependencies.
• Review technology resilience metrics, recovery performance, and testing outcomes to identify opportunities for improving organisational…