Technology Risk Management Specialist

Handles information security governance and technology risk at Point72, keeping the firm's security policy and standards library current and leading independent assessments of the security program, including regulatory examinations and third-party evaluations. The specialist identifies technology risks and drives mitigation, investigates privacy inquiries and events, advises control owners on policy and evidence, turns findings into remediation plans with technology, legal and compliance colleagues, and reports to management on risks and progress.

Point72 wants eight to ten years in information security GRC, extensive experience handling regulatory exams, vendor assessment tools such as SIG, OneTrust and KY3P, a record of writing security policy, and solid knowledge of CCPA and GDPR. Based in New York or Stamford.