Technical Risk Management - Risk Engineer I

Who we are...

As an industry-leading fintech provider, COCC delivers innovative, comprehensive technology solutions and strategic partnerships throughout the Northeastern United States. Listed among American Banker's FinTech 100 and the Inc. 5,000 fastest growing companies in the nation, COCC inspires the industry with innovation and top-quality support. Designated a Top Workplace in Connecticut and a nationally Certified Great Place to Work, COCC recognizes employees as the core of our success.

Inspiring you to become extraordinary in work and life.

What we need…

We're looking for a curious and motivated cybersecurity professional to join COCC's Technical Risk Management team. Technical Risk Management helps the organization make informed decisions about technology by evaluating security risks, reviewing controls, assessing vendors, and providing practical recommendations that enable the business to move forward securely. In this role, you'll work with a wide range of technologies including cloud services, applications, infrastructure, third-party solutions, and security tools while helping assess risk and support business innovation. You'll be part of a collaborative team that partners across the organization to solve problems, improve security, and continuously learn. This is an excellent opportunity to gain broad exposure to cybersecurity, technology risk, and regulatory requirements while building a well-rounded career.

What’s in it for you....

COCC offers a collaborative environment, career growth, and all the benefits you’d expect from an award-winning employer, including:

• Health Insurance: Employees and their eligible dependents – including spouses, domestic partners, and children – are eligible for coverage from the first day of the month following hire, including medical, dental, and vision insurance, as well as ancillary benefits. COCC also contributes to employees’ health savings accounts (HSA).
• Retirement: COCC matches 100% for the first 3% and 50% for the next 2% that employees contribute to their 401(k). Additionally, COCC may make a discretionary annual contribution to the plan based upon the profitability of the company.
• Paid Time Off: COCC offers a generous PTO policy, including quarterly wellness days, paid holidays, and a birthday day off.
• Hybrid Schedule: Enjoy the flexibility of a hybrid work schedule designed to support work-life balance and personal well-being
• Training & Development: COCC offers robust employee development programs aligned with career pathing objectives, including cutting edge training and educational resources, as well as a tuition reimbursement program to support continued education.
• Recognition Programs: Be recognized and celebrated through employee appreciation and peer recognition programs.
• On-site Fitness Centers: Stay active and energized with convenient on-site fitness centers available to employees.
• Fuel Up: Monthly company-sponsored lunches discounted catered meals, and convenient on-site snacks.
• Additional Benefits: COCC offers employees a Lifestyle Spending Account (LSA) to support employees’ unique needs, as well as company-paid life insurance, wellness initiatives, and access to financial planning guidance from certified professionals.

To learn more about our comprehensive benefit programs, please visit: https://www.cocc.com/careers/employment-benefits/

What you’ll do…

• Perform technical risk and control assessments for software, SaaS platforms, code packages, container images, external network connections, security exceptions, and contractor or vendor remote access requests.
• Support vulnerability, exposure, and recurring control reviews by validating findings, reviewing remediation evidence, tracking commitments, and documenting results for technology and physical security controls.
• Conduct technical reviews of third-party vendors by evaluating security questionnaires, penetration test results, assurance reports, certifications, architecture, and data handling practices.
• Support audits, regulatory examinations, client inquiries, and management reviews by gathering evidence, preparing responses, maintaining records, and tracking findings, risk acceptances, and remediation commitments.
• Identify opportunities to improve TRM processes, documentation, automation, reporting, and workload efficiency.

What you’ll bring…

• Strong written and verbal communication skills with the ability to explain technical concepts and security risks to both technical and non-technical audiences
• Analytical mindset with the ability to evaluate information, identify risk, and make sound risk-based recommendations
• Ability to gather, analyze, and validate information from multiple sources to support sound risk-based decisions
• Strong attention to detail when reviewing technical documentation, security reports, configurations, and supporting evidence
• Ability to manage multiple assessments, requests, and priorities while maintaining accuracy and meeting deadlines
• Curiosity and desire to continuously learn new technologies, cybersecurity concepts, and industry best practices
• Collaborative approach with the ability to build effective working relationships across teams, vendors, and business partners
• Sound judgment, professionalism, and discretion when handling sensitive or confidential information
• Commitment to process consistency, documentation quality, and continuous improvement

The salary range for this position is $53500-72300 annually. This is a hybrid role in Rocky Hill, CT

Applicants for employment in the US must have work authorization that does not currently or in the future require sponsorship of a visa for employment authorization in the United States.

COCC is committed to maintaining a drug-free workplace. All applicants are required to pass a credit, background, and substance test prior to employment. COCC procures background and consumer reports in compliance with all Federal and State regulations, including The Fair Credit Reporting Act and applicable Department of Labor laws regarding pre-employment screens. COCC is an equal opportunity employer committed to a community of inclusion, and an environment free from discrimination, harassment, and retaliation.

Accessibility - If you’re a job seeker with a disability and require accessibility assistance or an accommodation to apply for one of our jobs, please let us know by calling 860-678-0444 or emailing TalentManagement@cocc.com. Please specify the help you need and we’ll be happy to get back to you.