Enterprise Risk Manager

What Will You Contribute?

Finastra is seeking a strategic and forward-thinking Enterprise Risk Manager to strengthen enterprise and technology risk assessment capabilities through data-driven insights, advanced analytics, and responsible use of artificial intelligence. In this role, you will help identify, assess, monitor, and report on enterprise, technology, cyber, operational, and emerging risks while supporting alignment with business objectives and the organization’s risk appetite. You will play a key role in modernizing risk assessment practices, improving risk visibility, and helping leaders make informed, risk-based decisions.

This is a hands-on individual contributor role that combines enterprise risk management, technology risk assessment, analytics, stakeholder advisory, and influence-based leadership. The ideal candidate brings strong risk management expertise, a practical understanding of technology and cyber risk, and the ability to use data and insights to improve risk identification, reporting, governance, and decision-making across the enterprise.

You will partner closely with Technology, Cybersecurity, Compliance, Internal Audit, Product Management, Operations, and business stakeholders to support strategic initiatives, strengthen risk practices, and promote a risk-aware culture.

Responsibilities & Deliverables

• Lead enterprise-wide and targeted risk assessments focused on strategic, operational, technology, cybersecurity, resilience, third-party, and emerging risks.

• Develop and maintain risk assessment methodologies that evaluate both business and technology-related risks.

• Assess risks associated with cloud platforms, infrastructure, applications, data management, third-party technology providers, digital transformation, and AI-enabled initiatives.

• Partner with technology, cybersecurity, product, compliance, operations, and business teams to identify control gaps, emerging threats, and areas requiring management attention.

• Evaluate the potential impact and likelihood of technology, cyber, operational, and enterprise risks and provide actionable mitigation recommendations.

• Support the development and enhancement of enterprise risk management frameworks, risk assessment processes, and governance practices.

• Establish and monitor key risk indicators, risk appetite metrics, technology risk dashboards, and executive-level reporting.

• Prepare risk reports, trend analyses, and leadership-ready materials for senior stakeholders, risk committees, and governance forums.

• Use analytics, automation, visualization tools, and AI-enabled capabilities to improve risk insights, reporting efficiency, and decision-making.

• Identify opportunities to automate risk identification, assessment, monitoring, reporting, and escalation activities.

• Support the development of continuous monitoring approaches that use data, automation, and risk indicators to identify emerging and material risks.

• Assess control effectiveness across technology, cyber, operational, and enterprise risk management programs.

• Provide independent challenge and oversight of risk management activities while supporting practical, business-aligned outcomes.

• Provide risk advisory support for strategic initiatives, technology implementations, AI deployments, transformation programs, and business change initiatives.

• Facilitate risk discussions, workshops, assessments, and stakeholder conversations across the organization.

• Monitor emerging risks related to AI, cybersecurity threats, regulatory change, digital innovation, geopolitical developments, resilience, and third-party ecosystems.

• Conduct scenario analysis, stress testing, and forward-looking risk assessments to evaluate potential business impact.

• Recommend enhancements to governance, controls, reporting, and risk management processes based on industry trends, data insights, and evolving threats.

• Promote a risk-aware culture by building strong stakeholder relationships and enabling informed, balanced decision-making.

• Drive productivity and business performance by embedding AI-enabled automation, improving processes based on value and risk, ensuring trusted data standards, and leveraging insights to support informed decision-making and measurable outcomes.

Required Experience & Skills

• Strong experience in enterprise risk management, technology risk management, operational risk, cyber risk, IT audit, compliance, or a related risk discipline.

• Demonstrated ability to conduct enterprise, technology, cyber, operational, or emerging risk assessments.

• Strong understanding of enterprise risk management frameworks and technology risk management principles.

• Knowledge of technology risk domains such as cloud, infrastructure, cybersecurity, identity and access management, resilience, third-party risk, data management, and application risk.

• Ability to assess risk impact, likelihood, control effectiveness, and mitigation options in a business-relevant way.

• Experience supporting risk governance, executive reporting, risk committees, or senior stakeholder discussions.

• Ability to develop risk reports, trend analyses, dashboards, KRIs, risk appetite metrics, and executive-level presentations.

• Experience using data, analytics, automation, visualization tools, or AI-enabled approaches to support risk assessment, monitoring, reporting, or decision-making.

• Familiarity with risk management, analytics, and visualization tools such as Power BI, Tableau, ServiceNow, Archer, or similar platforms is helpful.

• Understanding of regulatory and industry frameworks such as COSO ERM, NIST Cybersecurity Framework, NIST AI Risk Management Framework, ISO 27001, FFIEC guidance, COBIT, operational resilience principles, or technology and cyber risk best practices.

• Familiarity with AI/ML concepts, AI governance considerations, responsible AI practices, or emerging technology risk is preferred.

• Ability to partner effectively with Technology, Cybersecurity, Compliance, Internal Audit, Product Management, Operations, and business stakeholders.

• Strong analytical, problem-solving, and critical-thinking skills.

• Strong executive communication, presentation, and stakeholder management skills.

• Ability to influence across organizational levels without direct authority.

• Strategic and enterprise-wide risk perspective with the ability to balance business objectives, innovation, governance, and control requirements.

• Data-driven mindset with a focus on continuous improvement, automation, and modern risk practices.

• Bachelor’s degree in Risk Management, Information Systems, Computer Science, Finance, Business, Data Analytics, or a related field is preferred.

• Advanced degree or relevant certifications such as CRISC, CISA, CISSP, CISM, CIA, FAIR, Certified Analytics Professional, AI Risk, or AI Governance certifications are a plus.

This is a hybrid role with 2 days per week in office requirement (Sandy Springs/Atlanta Office).