Avp - Technology Risk - Emerging Technologies

Group Risk Management (GRM) collaborates with businesses as a trusted advisor, facilitating well-informed decisions that support Nasdaq’s strategic objectives. GRM manages and continues to enhance the Enterprise Risk Management, Internal Control, Business Continuity, Crisis Management, and Corporate Insurance frameworks and programs. These programs facilitate the identification, assessment, monitoring, and treatment and reporting of all types of risks, Nasdaq faces.

The Enterprise Risk Management (ERM) team of GRM is seeking an experienced Technology Risk leader with expertise in technology. The Technology Risk leader will collaborate with Nasdaq’s Business Teams and Expert Functions (including Legal, Compliance, Technology, Information Security) to enable the responsible adoption of mainstream technology and emerging technologies across Nasdaq. The Technology Risk leader will support broader ERM efforts to implement and mature Nasdaq’s risk management framework and drive the implementation and enhancement of risk management programs across Global Technology to promote transparency and well-informed decision-making, support compliance with regulations and industry standards, and enrich reporting and analysis. The Technology Risk leader will report to the Global Head of Enterprise Risk Management.

As the AVP - Technology Risk - Emerging Technologies your responsibilities will include:

- Develop methodologies and tooling to embed an emerging technology risk management framework across Nasdaq.
- Integrate risk tolerances into business decision-making;
- Establish internal standards alongside legal, compliance, technology and infosec defining appropriate (risk-based) controls to identify and address risks from emerging technologies;
- Risk assess proposed use cases and partner with the business to control the responsible roll-out of emerging technologies across the firm
- Perform risk assessment of associated projects as they progress through the software development lifecycle into production.
- Establish reporting mechanisms to communicate risks across the portfolio of emerging technologies.
- Lead risk management coverage for emerging technologies including artificial intelligence (AI) and ensure Nasdaq’s alignment to evolving industry best practices;
- Work with Global Technology senior management to further embed the risk management framework and enhance related risk management reporting and analysis.
- Provide objective assurance and advisory to Technology senior management including identification of significant risks and risk response strategies and actions. Analyze risks and financial implications and work with management to ensure the level of risk remains within an acceptable level.
- Establish Key Risk Indicators (KRIs) and perform ongoing oversight across Nasdaq to ensure risks are periodically reviewed, managed within tolerance, and new threats considered in the operation of those services.
- Lead and execute risk assessments including Risk and Control Self Assessments (RCSA), Top Risk Assessments, Project Risk Assessments, New Product Assessments, as appropriate. Partner with Business Unit Risk Officers to execute business specific risk assessments.
- Support the business in use of third-party tools by conducting due diligence, as appropriate, to assess risks associated with the use and deployment of those tools
- Execute risk management training and promote a pro-active risk culture. Provide expertise and guidance on risk management concepts. Develop related training materials.
- Effectively communicate with the broader global risk team and partner with peers to ensure consistency of approach and awareness of issues, challenges, and opportunities; achieving shared goals and objectives and providing value-add to the organization.
- Pro-actively engage Internal Audit, SOX, Compliance, Information Security, Supplier Risk Management, Business Continuity, and other assurance functions to support an integrated approach to risk management. Share knowledge and expertise to achieve shared goals.
- Support Nasdaq’s Business Continuity and Crisis Management program to ensure resilience and crisis preparedness.
- Contribute as a thought leader through industry discussions and support Nasdaq’s public policy agenda.
- Review and draft responses to industry comment letters and RFIs.
- Monitor and report on the latest industry developments, external incidents and near-misses, regulatory updates and other matters with potential to impact Nasdaq’s strategy and/or operations.

Skills, Requirements, and Competencies
- 10+ years in a technology role.
- 3 - 5 years of experience managing risks associated with emerging technologies - preferably with a focus on Artificial Intelligence (AI), Web 3.0, cloud computing, and cybersecurity.
- Existing knowledge of the types of risks associated with the use of algorithmic and generative AI, privacy, 3rd party, IP and copyright, legal risks, operational and tec