Technology Risk Management Manager

About the role

PwC's Risk & Quality function offers a Technology Risk Management manager role within its IFS line of service. The manager combines risk judgement, technology awareness and stakeholder leadership to support the responsible adoption of digital and emerging technologies, working with technology teams, business stakeholders, Risk & Quality functions and regional teams.

Key responsibilities

• Lead and facilitate Technology Risk Assessments, covering scoping, risk identification, control evaluation, documentation and recommendations for remediation or acceptance.
• Support the design, implementation and improvement of technology risk processes and controls, initially focusing on AI governance.
• Develop and maintain technology risk policies, standards, guidance, practice aids and templates.
• Assess risks of AI, generative AI, machine learning and other emerging technologies, and lead or support reviews of AI-enabled solutions (use cases, data handling, model limitations, oversight, transparency, security, third-party dependencies).
• Help design AI governance processes and controls, turning responsible AI principles and regulations into practical review, approval, documentation and monitoring requirements.
• Prepare risk reports, dashboards, management information and metrics for leadership and governance forums, and analyse risk trends.
• Support automation and streamlining of risk assessment and reporting, and assist in special projects, regulatory reviews and firm-wide risk initiatives.

Required profile

• At least 5 years of relevant experience in technology risk management, AI governance, IT risk, information security, technology audit, regulatory compliance, enterprise risk management or a related field.
• Working knowledge of AI and modern technology, including how AI and generative AI solutions are developed, deployed and used, and their associated risks and governance considerations.
• An AI governance certification or equivalent professional credential is advantageous but not mandatory.

Required skills

• Knowledge of responsible AI principles and recognised AI risk or governance frameworks, standards and regulatory developments.
• Strong analytical, problem-solving, project management and stakeholder management skills.
• Excellent written and verbal communication, with the ability to explain complex risk issues to different audiences.
• Detail-oriented, proactive, able to manage multiple priorities and confident engaging stakeholders at all levels.