Technology & Cyber Risk Manager
Skills
About the role
This is a technology and cyber risk management role for an experienced risk professional to own zerohash's second-line function across Canada on a remote basis. You'll independently assess technology controls, oversee AI governance, and turn risk analysis into reports for senior leadership and the board.
What you’ll do
- Own the technology and cyber risk framework, including methodology, appetite metrics, and scenarios.
- Maintain a continuously updated technology risk register.
- Review first-line security outputs and issue independent risk opinions.
- Assess infrastructure, application, and AI risks with Engineering and Security.
- Lead the AI governance program, including use-case registration and classification.
- Support regulatory and counterparty risk assessments.
- Evaluate custody-critical and security-critical technology vendors.
- Track emerging AI, model, cryptographic, and technology risks.
What they’re looking for
- At least 5 years in technology risk, cyber risk, or information security risk management.
- At least 2 years in a dedicated second-line role at a bank, regulated fintech, or equivalent.
- Experience with GSIB-style third-party assessments.
- Ability to critically assess security deliverables and write independent risk opinions.
- Hands-on quantitative risk modelling experience using FAIR or an equivalent method.
- Familiarity with AI/ML risk governance, model inventories, use-case classification, and human oversight.
- Familiarity with DORA ICT risk requirements or equivalent EU financial regulation.
- Strong written communication for board and regulatory reporting.
Nice to have
- Experience in digital assets, payments, or regulated crypto-related institutions.
- FAIR certification or an equivalent quantitative risk credential.
- Knowledge of post-quantum cryptography standards and cryptographic inventory frameworks.
What’s on offer
- Remote work across Canada.
- Healthcare coverage for employees and partial spouse or child coverage in the U.S.
- Vision and dental insurance in the U.S.
- Equity opportunity.
- Maternity and paternity leave after six months.
- WeWork All Access membership.
- Work-from-home and learning-and-development stipends, subject to the stated eligibility period.
Questions about this role
Is this role remote?
Yes. The posting lists Canada as the location and the role as remote.
How much experience is required?
Applicants need at least 5 years in technology, cyber, or information security risk management, including at least 2 years in a dedicated second-line role.
What risk frameworks or methods are relevant?
The posting mentions FAIR or an equivalent quantitative method, DORA ICT risk requirements or equivalent regulation, and GSIB-style third-party assessments.
Does the role cover AI governance?
Yes. The manager will own an AI governance program covering use-case registration, risk classification, and oversight.
What benefits are listed?
Listed benefits include equity, leave after six months, WeWork All Access, and work-from-home and learning stipends; some insurance benefits are identified as U.S.-only.
Related roles
Front End Engineer
Fully remote front-end engineer role for a React and TypeScript developer in the United States or Canada. You'll work across customer and internal applications in a fintech and digital-assets environment.
Product Marketing Lead / Product Marketing Director
zerohash is hiring a Product Marketing Lead or Director of Product Marketing for a remote Canada role focused on positioning, packaging and launching technical fintech products. The role requires seven to ten or more years of B2B product-marketing experience in fintech, payments or crypto infrastructure.
Associate Project Manager/Moves Management
Turner & Townsend is hiring an onsite Associate Project Manager in New York City to coordinate corporate office moves and workplace change projects. The role suits an early-career project manager with workplace, occupancy, furniture, or move-management experience.
Information Technology Program Manager
A hybrid technical program manager role in Toronto leading integration of banking platform capabilities across product, engineering and compliance teams. Suits a program manager with 8+ years of large-scale tech delivery experience, including 5+ years in banking or fintech.
Senior Manager, CDM - FSP
A clinical data management manager role in Bangalore leading a project team under an FSP model for pharma and biotech clients.
Manager Tech Delivery / Partner Mgmt, TD Securities
A technology risk and controls manager role at TD Securities in Toronto, coordinating compliance documentation, audit remediation and governance reporting.