Principal Technology Risk Analyst – Program & Regulatory Assurance

skillventory - A Leading Talent Research Firm

Principal Technology Risk Analyst managing compliance and regulatory risk programs at Fidelity. Collaborating across departments to ensure adherence to enterprise and regulatory standards.

Posted 7/6/2026full-timeMerrimack • New Hampshire, Rhode Island, Texas • 🇺🇸 United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing technology risk and compliance, with a strong focus on developing and monitoring controls, conducting risk assessments, and ensuring adherence to regulatory standards. Proficient in documenting and maintaining Risk and Control Matrices while leading SOX 404 compliance efforts.

Highest-signal resume keywords

Technology Risk ManagementSOX 404 ComplianceRisk and Control Matrices (RCMs/RACMs)Cloud Security and ControlsGovernance, Risk, and Compliance (GRC) Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Technology RiskControl DocumentationRisk AssessmentsControl TestingControl CertificationRegulatory ComplianceSecurity ControlsAudit RolesCloud Technology EnvironmentsVendor Solutions

Soft Skills

Technical SupportLiaison SkillsCommunication Skills

Tools & Technologies

AWSAzureSaaSPaaSArcher

Certifications & Qualifications

CISSPCISACRISCCISM

Industry Keywords

NIST SP 800-53COBITAICPA Trust PrinciplesISO27001SWIFTHITRUST

Tech Stack

Tools & technologies

AWSAzureCloudSwift

About the role

Key responsibilities & impact

Ensuring risk and control taxonomy aligns with enterprise standards
Developing and monitoring technology controls for security and compliance
Providing technical support and acting as liaison for technology risk management
Managing control updates, annual mapping, and testing requirements
Design, document, and maintain Risk and Control Matrices (RCMs/RACMs) across business and IT processes
Overseeing control certification process
Partnering with Control Testing team to track progress and remediation
Supporting regulatory activities, risk assessments, and examinations
Leading and supporting SOX 404 compliance, including control documentation
Reviewing SOC reports, assessing CUECs, and communicating control gaps

Requirements

What you’ll need

5 -7 years’ experience in information technology risk, controls, or audit roles
Bachelor’s degree in computer science, technology, or a related field of study preferred
Professional technology and associated risk certifications (CISSP, CISA, CRISC, CISM)
Experience documenting controls for large scale financial service organizations (cloud, distributed, vendor solutions, mainframe, network environments, and AI)
Working knowledge of Cloud security and controls and cloud technology environments (AWS/Azure, SaaS, PaaS)
Knowledge of Industry standards, regulations, frameworks and best practices, such as NIST SP 800-53, COBIT, AICPA Trust Principles, ISO27001, SWIFT, HITRUST, and SOX404 is preferred
Knowledge of Governance, Risk, and Compliance (GRC) tools, such as Archer is preferred

Benefits

Comp & perks

Fidelity’s Onsite Working Model allows for flexibility in work arrangements in the future.