Director, Technology Risk

Having a strong financial future has a lot to do with the choices you make today.
One smart move is choosing to invest with Fidelity. We offer the guidance, competitive pricing, and investment options you need to reach your goals.




Primary responsibility for this Technology Risk position will be as program manager for a number of FISC Risk/Regulatory/Audit initiatives including, the planning, coordination, and execution of all FISC audit engagements, internal and external.  Additional responsibilities include the annual production of the Fidelity Network SysTrust engagement performed by external audit partners as well coordination of the FISC SAS 70.  Individual will be primary interface between FISC Operations and central Technology Risk Function and will be responsible for developing/ maintaining integration between FISC Technology Risk Program and these annual certifications.  Other responsibilities include the management of the FISC Sarbanes/Oxley program and representing FISC in a wide variety of enterprise risk related projects.  Frequent interaction with the business units to represent FISC components of various business unit and external customer related projects is also a consideration. Mentor/guide junior staff.



A successful candidate for this position will have an advanced degree and/or extensive job experience and certifications in a number of different disciplines related to this field of work.  Excellent communication skills, verbal and written are essential. This position meets frequently with all levels of employees including senior FISC and business unit managers, senior audit staff, and also with senior level external customer personnel.  Specific knowledge/familiarity of auditing methodology, current regulatory, governance, and legal requirements from the perspective of the SAS-70 and Trust Services programs is essential.  A working knowledge of the Sarbanes/Oxley legislation and its application to Fidelity Investments is also desired. Due to the nature of the major responsibilities of this position, a solid IT background is mandatory.  Background including actual technology delivery/operations management experience a significant plus.




Advanced degree in Information Technologyor a related field
Five or more years of information security or technology risk management experience
Five or more direct technology delivery/operations experience
Relevant certifications such as CISSP, CIA or CISM are desired
IT audit experience desired
Demonstrated project  management experience for large, complex projects
Demonstrated program management experience within distributed technology organization
Extensive practical and theoretical knowledge of information risk theory and operational controls 
Solid working knowledge of IT controls, COBIT, ISO17799 and regulatory requirements.