At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.
We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You’ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you’ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.
Join us for the opportunity to grow and make a difference in ways that matter to you.
*Before applying, please note that this position is based in our Maryland office and requires in-office presence four days per week. Only the Maryland compensation range displayed below applies to this role, regardless of a candidate's current location. Remote work beyond this arrangement and alternative office locations are not available. *
Role Summary
We are seeking a Senior Manager, Technology & Cyber Risk Management, to join the AI, Model and Technology risk team in the Chief Risk Officer organization. This second-line role provides independent oversight and credible challenges of technology, cyber, cloud, data, third-party, resilience, and AI-related risks across the enterprise. The role partners with technology, cybersecurity, business, compliance, operational risk, legal, and internal audit stakeholders to ensure risks are identified, assessed, monitored, reported, and managed in line with enterprise risk appetite and regulatory expectations.
Responsibilities
- Provide second-line oversight and credible challenge to management of technology, cyber, cloud, resilience, third-party technology, data protection, and AI-related risks across the enterprise.
- Lead and support risk assessments, control reviews, thematic deep dives, and oversight of major technology change, cyber, and AI-enabled initiatives.
- Lead or support AI, model & technology incident management program ensuring timely identification, reporting, escalation, root cause analysis, remediation and lessons learned for technology, cyber, data and AI incidents.
- Assess whether risks, controls, remediation plans, exceptions, and risk acceptances are appropriately identified, challenged, escalated, and managed.
- Develop risk reporting, KRIs, dashboards, and committee materials that provide senior leaders with clear insight into technology, cyber, and AI risk trends.
- Support enhancements to technology, cyber, and AI risk frameworks, policies, standards control frameworks, assessment methodologies, and governance routines, including alignment to recognized AI governance and GenAI security frameworks.
- Monitor regulatory developments, industry guidance, threat trends, audit findings, incidents, and emerging technology risks to inform second-line oversight priorities.
- Collaborate with Technology, Cybersecurity, Compliance, Operational Risk, Third-Party Risk, Business Resilience, Legal, and Internal Audit to drive consistent risk coverage and effective remediation.
- Partner with business risk managers to support broader technology, data, and operations business risk initiatives
Business knowledge
- Strong understanding of the three-lines-of-defense model and the role of a second-line risk function in oversight, challenge, aggregation, and reporting.
- Understanding of enterprise risk and business risk domains, and demonstrated success of integrating technology & cyber risk management activities into overall business unit and enterprise risk management plans
- Knowledge of technology and cyber risk domains, including information security, cloud, infrastructure, application security, data protection, resilience, incident management, third-party technology risk, identity and access management, and AI risk management.
- Understanding of financial services regulatory expectations related to technology, cyber, operational resilience, third-party risk, data governance, and AI/model risk intersections.
- Familiarity with risk and control frameworks such as NIST CSF 2.0, NIST 800-53, ISO 27001/27002, COBIT, COSO, FFIEC guidance, NIST AI Risk Management Framework, ISO/IEC 42001, ISO/IEC 23894, SR 11-7 model risk management guidance, and OWASP Top 10 for Large Language Model Applications.
Qualifications
Required:
- Typically requires 8+ years of relevant experience in technology risk, cyber risk, information security, technology audit, operational risk, enterprise risk management, regulatory supervision, or related financial services risk disciplines.
- Bachelor’s degree or the equivalent combination of education and relevant experience in information technology, cybersecurity, computer science, engineering, risk management, finance, business, or a related field; advanced degree preferred.
- Experience providing independent risk oversight, credible challenge, risk advisory, or assurance for technology, cyber, cloud, third-party technology, or AI-enabled processes in a complex, regulated environment.
- Ability to synthesize complex technical and risk issues into clear executive-ready narratives, dashboards, committee materials, and recommendations.
- Strong stakeholder management, analytical, communication, and prioritization skills, including the ability to influence outcomes without direct authority.
- Relevant certifications preferred, such as CISSP, CISM, CISA, CRISC, CGEIT, cloud security certifications, or AI governance/risk credentials.
FINRA Requirements
FINRA licenses are not required and will not be supported for this role.
Work Flexibility
This role is eligible for hybrid work, with up to one day per week from home.
Base Salary Ranges
Please review the job posting for the location of this specific opportunity.
$122,000.00 - $209,000.00 for the location of: Maryland, Colorado, Washington and remote workers
$135,000.00 - $230,000.00 for the location of: Washington, D.C.
$153,000.00 - $261,000.00 for the location of: New York, California
Placement within the range provided above is based on the individual’s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.
Commitment to Diversity, Equity, and Inclusion
At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all.
Benefits
We value your goals and needs, at work and in life. As an associate, you’ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.
Featured employee benefits to enrich your life:
T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.
