<p>Job Description Summary</p> <p>For over forty years, HarbourVest has been home to a committed team of professionals with an entrepreneurial spirit and a desire to deliver impactful solutions to our clients and investing partners. As our global firm grows, we continue to add individuals who seek a collaborative, open-door culture that values diversity and innovative thinking.</p> <p>In our collegial environment that's marked by low turnover and high energy, you'll be inspired to grow and thrive. Here, you will be encouraged to build on your strengths and acquire new skills and experiences.</p> <p>We are committed to fostering an environment of inclusion that promotes mutual respect among all employees. Understanding and valuing these differences optimizes the potential of both the individual and the firm.</p> <p>HarbourVest is an equal opportunity employer.</p> <p>This position will be a hybrid work arrangement, which translates to 2-3 days minimum per week in the office.</p> <p>The Risk Associate will support the Senior Manager, Enterprise Risk Management with the maintenance of the risk framework, incident management and the buildout of risk metrics. This role will focus on both the enterprise operational areas and specific technology functions that will conduct the independent identification and assessment of risks and issues.</p> <p>The ideal candidate is someone who is:</p> <ul> <li>Familiar with the Risk and Controls Self-Assessment (RCSA) process, experience with IT risk management preferred </li><li>Self-motivated and willing to collaborate with team members </li><li>Analytical with strong attention to detail </li><li>Strong written and verbal communication skills </li></ul> <p>What you will do:</p> <ul> <li>Maintain the enterprise/operational risk frameworks, ensuring IT alignment with organizational objectives and regulatory requirements </li><li>Identify, assess and prioritize enterprise/emerging risks to identify threats and vulnerabilities </li><li>Develop, implement and monitor risk mitigation strategies and action plans </li><li>Produce standardized metrics and risk dashboards summarizing risk severity, measurement and outlook </li><li>Facilitate the Risk and Controls Self-Assessment (RCSA) process </li><li>And other responsibilities as required </li></ul> <p>What you bring:</p> <ul> <li>Knowledge of enterprise and IT operational risks, principles and internal controls </li><li>Knowledge of risk dashboards and associated metrics </li><li>Understanding of financial services and information technology operational risks, controls/processes </li><li>Ability to work independently in a fast-paced environment and deliver a high-quality work product while meeting key deadlines </li><li>Ability to build and manage relationships with internal and external partners across all levels at the Firm </li></ul> <p>Education Preferred</p> <ul> <li>Bachelor of Arts (B.A) / Bachelor of Science (B.S) or equivalent experience in Accounting, Finance, or Management Information Systems </li></ul> <p>Experience</p> <ul> <li>3-5 years' experience in risk management and/or internal audit, preferably within financial services </li><li>Big 4 experience is preferred </li><li>CPA/CISA or other relevant certification preferred </li><li>Additional knowledge of NIST 800-53, NIST CSF, and/or ISO27001 frameworks are a plus </li><li>Proficiency in Excel, Word and PowerPoint required; integrated risk management tool experience preferred </li></ul> <p>#LI-Hybrid</p>