Technology Risk and Control Associate

Job Description Summary

For over forty years, HarbourVest has been home to a committed team of professionals with an entrepreneurial spirit and a desire to deliver impactful solutions to our clients and investing partners. As our global firm grows, we continue to add individuals who seek a collaborative, open-door culture that values diversity and innovative thinking.

In our collegial environment that’s marked by low turnover and high energy, you’ll be inspired to grow and thrive. Here, you will be encouraged to build on your strengths and acquire new skills and experiences.

We are committed to fostering an environment of inclusion that promotes mutual respect among all employees. Understanding and valuing these differences optimizes the potential of both the individual and the firm.

HarbourVest is an equal opportunity employer.

This position will be a hybrid work arrangement. You will receive 18 remote workdays per quarter to use at your discretion, subject to manager approval. For example, you may choose to work in the office 4 days per week and take one remote day weekly (typically 13 weeks per quarter), leaving 5 additional remote days to be used as needed.

As the Technology Risk & Control Associate at HarbourVest Partners, this job role will be responsible for enhancing Identity Governance processes, and ensuring regulatory compliance, managing risks, and maintaining robust governance policies. This includes, but is not limited to, building automation around Identity management governance processes, supporting the Technology Risk and Control program, and establishing governance frameworks to safeguard systems and sensitive information. Additionally, this role will assist in developing risk management strategies and participate in due diligence processes. This is crucial in navigating the cyber landscape, mitigating risks, and maintaining the firm’s reputation.

The ideal candidate is someone who:

• Demonstrates a strong commitment to ethical practices and maintaining the highest standards of honesty and transparency
• Passionate about results, goal driven, outspoken, accountable, and collaborative
• Able to drive business decisions using data and comfortable reporting on metrics
• Familiar working at a company with a global presence spanning multiple time zones
• Self-starter with demonstrable ability to work independently and prioritize tasks and time effectively
• Lead high-visibility and critical security projects to support a dynamic business environment
• Takes the initiative to identify and address potential issues before they become significant problems

What you will do:

• Develop program automation around Identity Governance in support of our external audit and internal governance controls.
• Drive and own the development and maintenance of cybersecurity policies, standards, and procedures to ensure compliance with industry regulations and guidelines.
• Lead regular risk assessments and audits to identify potential threats and vulnerabilities, as well as help develop mitigation strategies.
• Act as key point person to collaborate closely with the Legal, Compliance, and Enterprise Risk teams to support the integration of cybersecurity initiatives across the organization.
• Monitor and report on the effectiveness of the cybersecurity program, including key performance indicators and metrics.
• Stay informed about the latest cybersecurity trends, threats, and regulatory requirements, and provide support in implementing relevant updates.
• Assist in managing relationships with external auditors, regulators, and other collaborators to ensure compliance with relevant laws and regulations.

What you bring:

• Demonstrable experience in the financial services industry, with an understanding of specific security challenges and regulatory requirements.
• Ability to learn new skills and incorporate them into automation projects
• The ability to support the development and implementation of robust cybersecurity policies and procedures that align with industry guidelines and regulatory requirements.
• Clear and effective communication to share cybersecurity concepts with both technical and non-technical collaborators.
• A proactive approach to staying ahead of the latest cybersecurity trends and threats, ensuring the organization remains well-protected.
• The ability to build and maintain positive relationships with external auditors, regulators, and other collaborators, ensuring compliance with relevant laws and regulations.

Education Preferred

• BS in Computer Science, Information Security, or equivalent work experience
• Certified Information Security Manager (CISM) required within 1 year of employment

Experience

• 1-2 years of relevant work experience

#LI-Hybrid

Base Salary Range:

$95,000.00 - $100,000.00

This USD base salary range represents only one component of total compensation for this role and is provided in accordance with local requirements. This role is eligible for a discretionary annual bonus, which is determined based on individual and overall firm performance. In addition to salary and bonus eligibility, total compensation may include participation in long-term reward programs (typically for more senior-level roles). We also offer a comprehensive total rewards package that may include retirement contributions, health insurance, income protection, paid time off and leave benefits as well as well-being programs. Our total rewards offerings are influenced by several business factors, and eligibility for certain components will vary by position and geography. Please note the posted ranges do not apply outside the U.S. and should not be converted to other currencies as a proxy for compensation in other countries.