Director Technology Risk

About Our Company

We’re a diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. Our team of 22,000 people across 19 countries, serves more than 3.5 million individual, small business and institutional clients. We are a longstanding leader in financial planning and advice, a global asset manager and an insurer. Our unwavering focus on our clients and strong financial foundation connects each of our unique businesses – Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance and Annuities. Here, we foster meaningful careers, invest in the future, and make a difference for clients, institutions and communities around the world.

Job Description

Ameriprise Financial is looking to add a Director, Technology Risk to the team! The Director, Technology Risk is a leadership role within the Second Line of Defense (2LOD), reporting to the VP, Technology Risk Office. This role is responsible for executing independent oversight of Technology and Cyber / Information Security activities to ensure alignment with enterprise risk management standards while providing effective review, credible challenge, and risk transparency. This role will actively engage with IT stakeholders and senior leadership to foster a robust risk culture. This includes regular interaction and collaboration at various organizational levels.

Key Responsibilities:

• Lead risk oversight activities to ensure effective identification, assessment, and management of risks across the business. Execute risk oversight activities, including monitoring, review, and credible challenge of business processes to ensure alignment with enterprise risk standards and governance expectations. Support effective risk governance through adherence to policies, frameworks, and escalation protocols.
• Lead the implementation of the Operational Risk Management (ORM) methodology and requirements across assigned business unit, in agreement with the overall ORM framework
• Execute and support Risk and Control Self-Assessments (RCSAs), ensuring consistent application of the risk framework, accurate documentation of risks and controls, and adherence to enterprise standards. Contribute to continuous improvement of RCSA processes, tools, and methodologies.
• Provide subject matter expertise and advise on IT related risks and remediation/mitigation of risk exposures.
• Review and manage risk events (REVs), ensuring timely identification, documentation, escalation, and resolution. Provide effective challenge on root cause analysis and remediation plans and monitor trends to support proactive risk management.
• Support Risk Oversight Committee (ROC) governance by preparing materials, coordinating inputs, and tracking actions and decisions. Ensure timely and accurate reporting of key risk issues and follow-up on committee outcomes.
• Develop and deliver risk reporting, dashboards, and analytics to support monitoring and decision-making.
• Ensure data quality, consistency, and accuracy, and provide insights into emerging risks, trends, and control effectiveness.
• Enhance risk reporting with new ideas gathered from research, best practices, and knowledge.
• Support team delivery and effectiveness by providing guidance, coordination, leadership.
• Contribute to a collaborative team environment and support broader leadership priorities and initiatives.
• Provide leadership, performance management and improvement feedback, coaching, mentoring and development of employee direct reports.

Required Qualifications:

• Bachelor's degree or equivalent
• 7-10 years of relevant experience
• In depth knowledge of IT technical and operational processes, and associated risks and controls, IT risk management with a strong emphasis on AI risk management.
• Technical knowledge of risk management frameworks, applicable standards, and regulatory requirements including, NIST, COBIT, FFIEC, ISO27000, and other relevant IT governance frameworks.
• Ability to communicate complex information technology risks and issues to non-technical business stakeholders to ensure a clear understanding of criticality and implications.
• Familiarity and experience using eGRC solutions.
• Strong analytical, organizational, and time management skills.
• Strong ability to lead, partner, and influence across all leadership levels.
• Demonstrated people leadership experience, either through direct leadership or coaching/mentoring roles.
• Ability to drive results and meet deadlines to reduce risks.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least four (4) days per week, with flexibility to work from home one (1) day per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Visa Sponsorship

Applicants must have a valid work authorization that does not now, or in the future, require visa sponsorship for employment in the United States (e.g., H-1B, F-1 CPT, F-1 OPT, TN).

Base Pay Salary

The estimated base salary for this role is $140,200-192,800/year. We have a pay-for-performance compensation philosophy. Your initial total compensation may vary based on job-related knowledge, skills, experience, and geographical work location. In addition, most of our roles are eligible for variable pay in the form of bonus, commissions, and/or long-term incentives depending on the role. We also have a competitive and comprehensive benefits program that supports all aspects of your health and well-being, including but not limited to vacation time, sick time, 401(k), and health, dental and life insurances.Full timeExemptBusiness Support & OperationsFIN Finance

Ameriprise Financial is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, ancestry, age, physical or mental disability, medical condition, pregnancy, military status, veteran status, genetic information, citizenship, disability status, marital status, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.