Senior Manager, Trust Risk 102657

The Trust Risk Manager leads the Trust Risk Program at Autodesk and manages a multidisciplinary organization that includes Third-Party Risk Management as well as senior risk professionals.Trust Risk at Autodesk is an established team and program.We are looking for a leader with the lived experience of operationalizing a risk program that is Trusted by leaders and executives to drive risk-based decisions in the areas of Trust – Security, Privacy, Trusted AI, and Resilience. This individual will report directly to the Director of Trust Governance, Risk, and Compliance.The successful candidate will bring deep expertise in at least one Trust risk domain and sufficient breadth across security, privacy, trusted AI, resilience, and third-party risk to integrate specialist perspectives into an enterprise risk view.

Operationalizing risk management and working with executive stakeholders is as much of an art as itis science. The Trust Risk Manager needs to have lived, practical experience to guide incremental program improvements and help modernize the program in the time of AI. They should be passionate about helping leaders and teams identify and achieve successful outcomes to reduce risk vs checking boxes for short-term gains.The role requires a strategic thinker with a technical background who can work cross-functionally to ensure our products and operations meet the highest standards of security and user trust.This role can be on-site, hybrid, or remote in the US.

Responsibilities

• Utilize extensive technical risk expertise to help Autodesk maintain and grow its Trust Risk Program. Guideproduct and engineering teams inproactive planning for managing risk through its entire lifecycle

• Develop Trust Risk Program strategy and associated roadmaps, capability monitoring, and operation metrics to focus on impact on Autodesk’s overall business goals and Trust standards 

• Define and execute an AI-enabled modernization strategy for Trust Risk operations. Identify, test, and scale uses of AI and automation that improve risk insight, decision speed, program quality, and analyst capacity while maintainingappropriate human judgment, validation, and governance

• Engage with Trust, engineering, product, industry strategy, and program managers to prioritize risk mitigation work while balancing Trust needs with overall Autodesk strategy (prioritization and delivery)

• Work with the Trust, Product, and Engineering leadership to establish clearmitigation delivery plans. Create alignment on cross organization initiatives through outcome driven planning, dependency management, and impediment removal. Establish enterprise mechanisms for mitigation accountability, including clear ownership, risk-based prioritization, aging and escalation criteria, executive visibility, and intervention when commitments are stalled or business conditions change

• Develop holistic communications plans for delivering status communications and updates in ascalable way that minimizes friction. Support the communication of program health, mitigation work, and achievements to Autodesk teams and divisional leadership  

• Facilitate fact-based, data-driven decision-making with the appropriate domainexpertise and program owners

• Engage with stakeholders to gather feedback and identify program improvement areas. Bring results to program leaders in an actionable manner

• Develop annual and multi-year operating plans for the Trust Risk function, including capability priorities, organizational design, talent requirements, technology investments, budget tradeoffs, and measures of effectiveness

Minimum Qualifications

• 7+ years ofdemonstrated experience building, operating, scaling, and materially improving a technical risk management program in a complex technology organization

• 4+ years of experience managing people in a remote or hybrid environment

• Strong understanding of one or more Trust (security, privacy, resilience, responsible AI) principles

• Demonstrated experimentation with or implementation of AI-enabled risk, compliance, security, audit, or operational workflows. Able to distinguish high-value applications from superficial automation and establishappropriate human review, data handling, validation, and measurement practices

• Moderate understanding of compliance frameworks (e.g., SOC 2 and ISO 27001) and audit activities

• Basic understanding of cloud hosting, infrastructure technologies, SaaS, and cloud services (e.g., AWS, Microsoft)

• Experience managing different company stakeholders, from technical teams to business leaders, product managers, and designers

• Demonstrated superior communication and interpersonal skills, with the ability to influence and drive consensus across diverse stakeholders. Experience briefing executives and various levels of leaders

• Provenrecord of leading multi-year risk or governance programs that produced measurable improvements in business decision-making, risk reduction, accountability, operational effectiveness, and customer trust

• Demonstrated experience communicating and reporting program health, driving initiatives and facilitating the delivery of on-time results

Preferred Qualifications

• Strong analytical and problem-solving skills

• Ability to think strategically and execute methodically

• Familiarity with regulatory requirements and standards related to security use cases

• Experience using tooling to scale programs and solutions (e.g., Jira, Atlassian, SharePoint, various GRC platforms, etc.)

• Experience in the software or technology industry

• Experience working with cross-functional teams in an Agile development environment

• Knowledge of cloud security, data privacy, and threat detection/prevention technologies