Director, Technology Risk Officer - Cyber/AI

Director, Technology Risk Officer - Cyber/AI

TIAA Hybrid in Woodbridge Township, NJ, US • Posted 3 hours ago • Updated 3 hours ago Full Time On-site

Base Pay Range: USD 153,000 - 207,000 per year

Summary The Technology Risk Officer - Cyber / AI provides 2LoD input and effective challenge of Cybersecurity strategic projects with an initial focus on the Cyber response to AI Frontier models Program. The role will manage the Controls efforts daily, ensuring controls keep pace while risks in other aspects of the Program are identified, prioritized, and addressed. The role will coordinate with other Risk and Compliance areas to ensure appropriate information flow and input as required by deliverables, including coordination with Enterprise Resiliency and transforming the Off Network Backup program in alignment with the Cyber response to AI Frontier models Program strategies. Longer term, the role will enhance Cybersecurity to address evolving risks related to AI advancements and other emerging technologies, such as Quantum.

Key Responsibilities

• Lead the delivery of the Cyber Risk Management Framework, developing, maintaining, and rolling out updates to cybersecurity policies, standards, and risk-tiering methodology, and integrating with enterprise risk management and compliance partners

• Monitor changes in the technology landscape to recommend changes to the Risk Framework and ensure controls are efficient and effective

• Manage the second-line oversight of the Cyber response to AI Frontier models Program, including risk assessment, control development, prioritization based on risk, and progress reporting with escalation as needed

• Partner across Risk and Compliance to ensure appropriate touchpoints are in sync and aligned

• Lead the expansion of Cyber KRIs and KCIs, focusing on impacts of expanded AI capabilities, to defend the organization and monitor threats from AI availability to malicious actors and internal AI Agents

• Coordinate the evolution of Technology Risk architecture and Infrastructure for a more secure baseline and improved testing capabilities for functionality, resiliency, and security

• Manage escalations and cross-functional collaboration across business, technology, legal, compliance, cybersecurity, and audit

• Educational Requirements

• University degree preferred

• Work Experience

• 5+ years required; 7+ years preferred

• Physical Requirements

• Sedentary work

Required Skills

• 5+ years of experience in Cybersecurity, IT Risk Management, IT Audit, and/or IT Compliance; 1+ year of experience with AI engineering, development, support or compliance

• Preferred Skills

• 7+ years of experience in Cybersecurity; 2+ years of experience with AI engineering; familiarity with financial services / insurance cybersecurity laws/regulations, control frameworks; extensive experience in risk and control assessments or audits; professional certifications: CISA, CISSP, CRISC and/or CISM

• Anticipated Posting End Date

• 2026-11-02

• Company Overview

• Every worker deserves a secure retirement. For more than 100 years, TIAA has delivered it for millions of people. The organization is committed to helping clients secure their financial future and supports a culture focused on collaboration, learning, and impact.

• Benefits and Total Rewards

• TIAA offers a comprehensive Total Rewards package including a superior retirement program and competitive health, wellness, and work-life offerings. Further details are available upon review.

• Equal Opportunity

• TIAA is an Equal Opportunity Employer. We do not discriminate on age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.