M365 Risk Manager

Risk Manager

We are seeking an experienced Risk Manager to join our technology team and provide dedicated risk management oversight for Microsoft 365 applications and services. This role will serve as the primary point of contact for application risk governance, continuous monitoring activities, risk assessments, control reviews, and remediation tracking within a highly regulated financial services environment.

The ideal candidate will have a strong understanding of enterprise risk frameworks, technology controls, Microsoft 365 security and compliance capabilities, and experience managing technology-related risks. Candidates with prior banking technology experience and familiarity with internal risk management processes, governance programs, and risk tracking systems are highly preferred.

Key Responsibilities:

• Manage application risk activities for Microsoft 365 platforms and related technologies.
• Coordinate continuous monitoring activities and ensure compliance with enterprise risk standards.
• Perform risk assessments, control reviews, gap analyses, and remediation tracking.
• Partner with technology teams, application owners, information security teams, and risk organizations to identify and mitigate risks.
• Facilitate risk reviews, issue management activities, and governance reporting.
• Monitor and track risk findings through closure, ensuring appropriate documentation and stakeholder communication.
• Support audit, regulatory, and compliance activities related to application controls and technology governance.
• Evaluate security and compliance controls within Microsoft 365 environments.
• Maintain documentation related to risk exceptions, control effectiveness, and remediation efforts.
• Provide status updates to leadership regarding risk posture, open findings, and mitigation plans.
• Work closely with internal governance teams to ensure adherence to evolving risk standards and policies.

Required Qualifications:

• 5+ years of technology risk management, operational risk, cybersecurity risk, or application governance experience.
• Experience performing risk assessments, issue management, control reviews, and continuous monitoring activities.
• Strong understanding of technology risk frameworks and governance processes.
• Experience with risk remediation tracking and risk lifecycle management.
• Ability to communicate effectively with technical teams, risk partners, auditors, and senior leadership.
• Experience supporting highly regulated enterprise environments.

Preferred Qualifications:

• Familiarity with RISE and other internal risk tracking platforms.
• Understanding of GIS risk processes and current risk governance standards.
• Experience supporting Microsoft 365 technologies and security controls.
• Knowledge of Microsoft Purview, Conditional Access Policies, Tenant Restrictions, Information Protection, Identity Governance, and related M365 security capabilities.
• Experience working with audit, compliance, and regulatory review processes.

Technology Focus Areas:

• Microsoft 365
• Microsoft Purview
• Conditional Access
• Tenant Restrictions
• Identity and Access Management
• Information Protection
• Data Governance
• Compliance Controls
• Risk Monitoring and Reporting
• Security Governance

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.