Associate/Assistant Vice President - Technology (Technology Risk)

PJT Partners is a global advisory-focused investment bank. Our team of senior professionals delivers a wide array of strategic advisory, shareholder advisory, restructuring and special situations and private fund advisory and placement services to corporations, financial sponsors, institutional investors and governments around the world. We offer a unique portfolio of advisory services designed to help our clients achieve their strategic objectives. We also provide, through PJT Park Hill, private fund advisory and fundraising services for alternative investment managers, including private equity funds, real estate funds and hedge funds.

From the beginning, PJT Partners has firmly believed that having the best people is key to building an enduring franchise. Our perspective was, and remains, that a great team brings in both top tier clients and appeals to a wide-range of diverse, talented colleagues. Fostering an inclusive culture, which welcomes differing perspectives and beliefs, enables us to provide the best advice and insights to our clients.

To learn more about PJT Partners, please visit our website at www.pjtpartners.com.

Responsibilities

The PJT Partners Technology team is responsible for creating and continuously improving a robust and secure technology foundation that supports the firm’s business activities.

Underpinning that, the Technology Risk function ensures that the firm accurately captures, measures, and remediates key risks and evaluates applicable controls related to the firm’s technology. We are seeking a high performing Technology Risk Professional to join us to help drive change by leveraging technology and improving processes.

Additional responsibilities include:

• Manage the full lifecycle of risks, controls and remediations;
• Establish strong relationships with all stakeholders in Technology and across relevant corporate and business functions;
• Assist in identifying, managing, assessing and reporting technology risks;
• Provide impact and criticality assessments for guidance on risk decisions based on internal and external policy;
• Collaborate with Technology stakeholders to develop key risk and key performance indicators;
• Provide input on risk framework adherence and identify gaps.

Key Areas of Focus

Risk Management and Framework Oversight

• Assist the Head of Information Security and Technology Risk in monitoring risks and overseeing the control framework;
• Manage and enhance risk and control frameworks to ensure alignment with industry standards such as ISO and/or NIST;
• Conduct risk assessments and gap analyses, evaluating control effectiveness and recommending mitigation strategies;
• Balance risk management objectives with business operability to ensure a pragmatic approach to technology risk.

Technology Risk Monitoring and Reporting

• Oversee risk monitoring efforts and deliverables, including designing and implementing risk metrics (i.e. KRIs and KPIs) and dashboards for reporting;
• Lead weekly Technology Risk and Audit status meetings to track progress, address outstanding issues, and ensure alignment across teams.

Audit, Remediation and Compliance

• Manage and track internal and external audit requests, ensuring accurate and comprehensive responses;
• Partner with business units to address technology risks, recommend solutions, and develop effective responses to audit findings.

Policy and Process Management

• Continuously improve the firm’s policy framework, regularly reviewing and updating policies, procedures, standards, and guidance;
• Lead and manage annual entitlement reviews, engaging department heads throughout the process.

Incident Response and Operational Risk

• Lead the creation of Operational Risk Incident reports after security incidents, overseeing documentation efforts during and after such events;
• Collaborate with stakeholders to identify root causes and develop strategies for risk mitigation.

Third-Party and Vendor Risk Management

• Lead the technical third-party risk management process, including vendor assessments and ongoing monitoring;
• Ensure vendor and third-party relationships comply with the firm’s risk management and regulatory requirements.

Qualifications

PJT Partners seeks to hire individuals who are highly motivated, intelligent and have demonstrated excellence in prior endeavors. In addition, qualified candidates will possess the following:

• Bachelor’s degree in Computer Science, Engineering, Information Systems, Policy or similar preferred;
• 5-7 years of experience in technology risk;
• Strong knowledge of cyber and risk frameworks (i.e. ISO 27001, NIST 800-53, 37 or similar);
• Knowledge of IT governance and current policy and regulatory requirements
• Familiarity with SOX audit process;
• Familiarity with SOC II type II reports;
• Experienced in managing risk platforms (i.e. RSAM or similar);
• Strong knowledge of identity and access management;
• Strong knowledge of technology, cyber, and related regulatory risks;
• Working knowledge of data privacy requirements;
• Excellent communication skills;
• Technical writing and presentation experience;
• Strong knowledge of compliance policies (finance preferred);
• Strong knowledge of information security best practices.

Expected annualized base salary of $115,000 to $150,000.

This range represents the low and high ends of the expected annualized base salary for this position. The specific base salary received by any employee will be informed by a number of factors, including but not limited to, role level and scope, location, candidate’s relevant qualifications, skills and experience.

Base salary is one component of PJT Partners’ compensation structure. In addition to base salary, PJT Partners’ compensation structure may include additional rewards, incentives and benefits, including but not limited to, a discretionary bonus component.

PJT is an equal opportunity employer. We do not discriminate on the basis of, and will consider all qualified applicants for employment without regard to race, color, religious creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity expression, disability, medical condition, genetic information or predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other category protected by law. PJT Partners also complies with all applicable laws with regard to providing reasonable accommodation of disabilities to applicants. For more information or to request an accommodation, please contact Human Resources.

California Applicants: PJT Partners will consider for employment qualified applicants with arrest and/or conviction records in a manner consistent with applicable law including, but not limited to, the San Francisco Fair Chance Ordinance and/or Los Angeles Fair Chance Initiative for Hiring Ordinance.

Applicant Privacy Notice:

View our Applicant Privacy Notice https://info.pjtpartners.com/PJT_Global_Applicant_Privacy_Notice here. If you are a California resident, please refer to our California Applicant Privacy Notice https://info.pjtpartners.com/California_Applicant_Privacy_Notice for further information.

*In order to be considered, please ensure your resume/CV is submitted in PDF format.