Senior Lead Control Management Officer – Cloud Platform

• Lead Technology Controls engagement with the Cloud Platform organization
• Provide strategic control oversight and risk leadership for enterprise infrastructure services, cloud platform adoption, platform engineering, and control modernization initiatives
• Partner with Infrastructure Engineering, Cloud Platform Engineering, Information Security, Technology Risk, Audit, and Control Management teams
• Perform risk identification and assessment, control design and evaluation, issue management, governance reporting, regulatory engagement, and automation strategy advancement
• Advise senior technology and control management leaders on risk mitigation strategies for complex infrastructure and cloud risks
• Design, implement, and continuously improve control frameworks for infrastructure, cloud platforms, storage, compute, network, database, middleware, platform engineering, and Control-as-Code
• Monitor, measure, evaluate, and report control and risk mitigation effectiveness
• Lead audit, regulatory examination, horizontal review, and independent testing assessment and remediation activities
• Identify emerging technology risks related to cloud adoption, automation, AI-enabled infrastructure operations, and platform modernization
• Support infrastructure transformation programs and cloud migration initiatives as a key control partner
• Lead risk and control governance activities, including executive reporting, risk committee materials, and regulatory updates
• Mentor and guide control officers and virtual teams
• Develop risk and control frameworks for enterprise infrastructure services
• Assess hybrid cloud, platform engineering, and infrastructure modernization risks
• Evaluate controls across compute, storage, networking, databases, container platforms, virtualization, and cloud-native services
• Identify control gaps and develop sustainable remediation strategies with technology leaders
• Embed automated controls within CI/CD, Infrastructure-as-Code, and platform deployment processes
• Drive continuous compliance monitoring and automated evidence collection
• Establish governance standards for automated preventive, detective, and corrective controls
• Reduce manual control execution and testing through automation
• Partner with Audit, Compliance, Independent Risk Management, and regulators during reviews and examinations
• Coordinate issue management, root-cause analysis, and corrective action plans
• Analyze KRI, issue, control testing, and operational loss data for systemic risk trends
• Lead control health reporting and executive risk dashboards
• Support risk appetite monitoring and governance forums
• Present findings and recommendations to senior technology executives and control committees
• Lead control management for major infrastructure and cloud transformation programs
• Evaluate modernization initiatives through a risk and controls lens
• Integrate governance, resiliency, security, and compliance requirements into engineering processes
• Drive scalable control solutions that enable innovation while maintaining risk management

Requirements

• 7+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through work experience, training, military experience, or education
• 7+ years of Control Management, Technology Risk, Information Security, or Audit experience
• 5+ years supporting large-scale technology organizations
• Deep understanding of Cloud Security, Platform Engineering, Infrastructure-as-Code, DevSecOps, Site Reliability Engineering (SRE), Control Automation, and Continuous Compliance Monitoring
• Experience implementing Control-as-Code frameworks
• Knowledge of OCC Heightened Standards, FFIEC guidance, NIST, COBIT, and enterprise technology policies
• Experience supporting large-scale infrastructure modernization, cloud migration, or digital transformation programs
• Relevant certifications such as CRISC, CISA, CISSP, CCSP, AWS/Azure/GCP Cloud Certifications, CGRC, or ITIL
• Visa sponsorship is not available for this position

Core Competencies

Demonstrates expertise in Risk Management and Control Management within large-scale technology organizations, with a strong focus on Cloud Security, Infrastructure-as-Code, and Control Automation. Proven ability to design and implement effective control frameworks while ensuring compliance with regulatory standards.

Highest-signal resume keywords

• Risk Management
• Control Management
• Cloud Security
• Control Automation
• Infrastructure-as-Code

Hard Skills

• Control Design
• Risk Identification
• Governance Reporting
• Continuous Compliance Monitoring
• Control-as-Code Frameworks
• DevSecOps
• Site Reliability Engineering
• Cloud Migration
• Infrastructure Modernization
• Automation Strategy

Soft Skills

• Leadership
• Mentoring
• Collaboration
• Communication
• Strategic Oversight

Certifications & Qualifications

• CRISC
• CISA
• CISSP
• CCSP
• AWS Certification
• Azure Certification
• GCP Certification
• CGRC
• ITIL

Industry Keywords

• OCC Heightened Standards
• FFIEC Guidance
• NIST
• COBIT
• Enterprise Technology Policies

Tools & Technologies

• CI/CD
• Cloud Platforms
• Virtualization
• Container Platforms
• Automated Controls