Principal Technology Risk Analyst - Program & Regulatory Assurance

### Job Description:

Title: Principal Technology Risk Analyst

Note: Fidelity will not provide immigration sponsorship for this position.

The Role

The Enterprise Technology Risk group is seeking a passionate, driven and experienced professional to contribute to the Technology Risk Program and Regulatory Assurance CoE team. This role is responsible for performing regulatory and program management responsibilities, including designing and maintaining technology controls to support program and regulatory requirements. This role will require networking and relationship management skills to collaborate with the Controls Testing team, and various business units and risk teams across the enterprise. You will be working on:

• Ensuring risk and control taxonomy aligns with enterprise standards
• Developing and monitoring technology controls for security and compliance
• Providing technical support and acting as liaison for technology risk management
• Managing control updates, annual mapping, and testing requirements
• Design, document, and maintain Risk and Control Matrices (RCMs/RACMs) across business and IT processes
• Continuously improve and standardize control documentation and governance practices
• Overseeing control certification process
• Partnering with Control Testing team to track progress and remediation
• Representing ETRA in enterprise control initiatives and special projects
• Supporting regulatory activities, risk assessments, and examinations
• Leading and supporting SOX 404 compliance, including control documentation

Reviewing SOC reports, assessing CUECs, and communicating control gaps *

The Team

The Technology Risk Program and Regulatory Assurance team is responsible for managing controls to support program requirements, monitoring the results of control testing to meet program requirements, and ensuring a consistent risk and control taxonomy is leveraged in accordance with enterprise best practices. Additionally, this te...