🎯 Job Search Agent

New York, NY · Fast growing · via manual_submit

🗓 Posted: not published by source  ·  Found by agent: 2026-08-05 12:17

Open posting ↗

Application documents

Score breakdown

Telegram alerts

2026-08-05T18:14:28+00:00 → chat 5272237815 · sent

Synthesis sent: Reflection, an open AI model research lab in NYC, seeks a senior risk leader (titled Manager of Risk & Governance / Head of Risk & Trust Governance in the posting) to build and run enterprise risk management, controls, and policy governance from the ground up. Role spans risk framework design, AI governance/ethics oversight, and external representation to regulators, auditors, and customers; no direct reporting line is stated.

2026-08-05T17:34:53+00:00 → chat 5272237815 · sent

Synthesis sent: Reflection (an AI research lab building open models) is hiring a Head of Risk & Trust Governance to build and own its enterprise risk management framework, policies, controls, and risk registries from scratch. This on-site NYC role also covers AI governance/ethics and represents the company externally to regulators, auditors, and customers; reporting line not specified.

Resume customization

Variant Lucian_Lipinsky_CV__JPMC__2026.docx engine claude 11454 in / 4682 out tokens ✓ 10/10 review passed

⬇ Download tailored resume (.docx)  ·  📝 What changed (changelog)

Keywords injected / gaps: risk governancecontrol environmentpolicy and standards governanceAI riskregulatory engagementrisk frameworksecond line of defenserisk registrycontrol inventory

Lucian Lipinsky de Orlov
lucian@lipinskyllc.com  ▪  914-656-0324  ▪  linkedin.com/in/lipinsky/
	
	
Enterprise Risk & Controls Governance Executive | Financial Services
Second Line of Defense Leadership | Regulatory & Audit Engagement
AI Risk, Identity & Data Governance | Executive Education
Senior risk and governance executive with 20+ years designing and operating enterprise risk frameworks, control environments, and policy governance programs across global financial institutions. Deep background in second line of defense risk oversight, regulatory engagement, and translating complex technical and emerging AI risk into clear executive and board-level reporting. Experience building risk registries, control inventories, and policy hierarchies at scale, and representing organizations directly to regulators, auditors, and other external stakeholders. Recognized educator and communicator known for making complex risk and AI concepts accessible to technical and non-technical audiences alike.
			
	
Professional Experience Highlights
American Express - New York, NY
Senior Director, Risk & Information Security	2025 - Present
Cybersecurity Technology & Resiliency Risk Oversight
Senior Director within American Express' global cyber risk oversight organization, leading a distributed team focused on data security, privacy, and identity & access management (IAM).
Lead global risk oversight framework spanning data protection, privacy, and identity security controls across enterprise platforms, cloud environments, and third-party ecosystems.
Advise senior executives on cyber risk exposure, control effectiveness, and practical risk-reduction actions impacting customers, employees, and business operations.
Translate complex cybersecurity, privacy, and IAM risks into clear, practical guidance to support executive decision-making and risk awareness among non-technical stakeholders.
Partner with technology, legal, privacy, and business leadership to align cyber risk posture with regulatory expectations and business objectives.
Lead, coach, and set standards for a global team of senior cyber risk professionals.
Citigroup - New York, NY
Senior Vice President, Cyber Operational Risk Officer	2023 - 2025
Providing independent challenge and governance oversight across vulnerability management, incident response, threat intelligence, security operations, and policy and controls governance
Advised senior leadership on cyber risk exposure, residual risk, and prioritization across global financial services operations.
Translated technical findings into executive decision briefs for non-technical leadership.
Represented the organization to global regulators on risk posture, resilience, and remediation strategy.
Oversaw global adversarial emulation exercises with focus on preparedness, judgment, and executive response readiness.
Owned and modernized the policy and standards governance lifecycle, ensuring cybersecurity policies and guidelines kept pace with evolving regulatory expectations.
Franklin Templeton Investments - New York, NY
Global Director of Security and Risk (CISO)	2019 - 2023
Advised UHNW individuals and family offices within Franklin Templeton's Fiduciary Trust subsidiary on personal and family office cybersecurity risks, including digital assets, privacy exposure, identity compromise, and secure handling of sensitive financial information.
Executive accountable for the enterprise cybersecurity and risk management framework across 45 countries supporting $1.7T AUM.
Advised executive leadership on cyber risk tradeoffs, investment decisions, and incident preparedness.
Led incident response planning, executive tabletop exercises, and crisis simulations.
Architectural advisor to the world's first SEC-approved tokenized government money fund, advising on blockchain, cryptography, and emerging technology risk.
QuSecure - San Mateo, CA
Board Advisor (Quantum Security)	2020 - 2023
Provided technical guidance on post-quantum cryptography architecture and applicability in regulated financial services environments.
Translated complex quantum and cryptographic concepts into clear, credible narratives for executive leadership, potential investors, and media.
Citihub - New York, NY
Partner, CISO-for-Hire	2008 - 2015
Served as trusted cybersecurity advisor to C-suite executives across financial services and other industries.
Delivered executive briefings, tabletop exercises, and strategic cyber guidance aligned to business risk.
Deloitte Consulting - New York, NY
Senior Manager, Security SME	2003 - 2008
Advised capital markets, wealth management, and retail banking clients on technology and security risk.
Led large-scale regulatory and security initiatives and delivered C-level presentations.

	
Private Bank Relevance
Identity compromise, privacy exposure, fraud, and digital asset risk are primary cyber threats to UHNW individuals and family offices.
Career experience translating institutional cyber risk into practical, personal, and reputational impact considerations applicable to Private Bank clients.

	
Thought Leadership & Education
Fordham University - Three Minute Thesis (3MT) Competition
First Place Winner (2018)
Recognized for delivering advanced research on AI-driven threat detection to a non-technical audience in under three minutes, demonstrating exceptional clarity and executive communication on emerging AI risk topics.
Fordham University - Lincoln Center, New York, NY
Adjunct Professor, Center for Cybersecurity 2019 - Present
Teach undergraduate and graduate courses in computer security systems, encryption, operating system vulnerabilities, and disaster recovery. Program designated by NSA/DHS as a National Center of Academic Excellence in Cyber Defense Education.


Education
MS in Cybersecurity
Fordham University, Graduate School of Arts and Sciences, New York, NY
NSA and DHS National Center of Academic Excellence in Cyber Defense Education Certified
MS in Advanced Technology, Specialization in Computer Science
Thomas J. Watson School of Engineering, Applied Science, and Technology
	Graduated School of State University of New York, Binghamton, NY	
BS in Computer Science
State University of New York, Binghamton, NY
Certification & Training
ISACA CRISC - PMI Project Management Professional (PMP) - ITIL Foundation Certified - Certified Disciplined Agilist - Enterprise Lean Six Sigma Green Belt - CISSP (Candidate) - IBM Certified Professional - Project Management - New York State Notary Public

I'm looking for…

Home
1
My Network
Jobs
Messaging
17
Notifications

Me

For Business
Learning
Company logo for, Reflection.
Reflection

Manager of Risk & Governance

New York, NY · Reposted 6 hours ago · Over 100 people clicked apply

Promoted by hirer · Responses managed off LinkedIn

On-site
Full-time
Apply

Save
Use AI to assess how you fit
Show match details

Tailor my resume

Create cover letter

Help me stand out

People you can reach out to

Nina D'Souza

• 3rd

Strategy and Go-to-Market | National Security | Business Development | Partnerships

Company alum from American Express

Message
About the job
Our Mission

Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.

Role Overview

The Head of Risk & Trust Governance is responsible for designing, operating, and continuously maturing the organization's enterprise risk management and control environment. This leader owns the full lifecycle of risk governance — from obligation identification and control architecture to risk measurement, reporting, and external representation — ensuring the organization operates within its stated risk appetite while advancing its strategic objectives.

Sitting at the intersection of risk, compliance, technology, and AI safety, this role is uniquely positioned to shape how the organization understands and responds to a dynamic regulatory and operational risk landscape. The ideal candidate brings deep expertise in enterprise risk frameworks, a systems-level perspective on controls design, and the executive presence to represent the organization's risk posture to regulators, customers, and other critical external stakeholders.

This is a high-visibility, high-impact role that operates across all business functions. Success requires the ability to translate complex risk concepts into actionable governance structures, influence without direct authority, and build trusted relationships internally and externally.

What You'll Do

Control Environment & Risk Framework Architecture

Architect and govern a control environment that drives efficient, prioritized adherence to organizational obligations in alignment with management's objectives and stated risk appetite.
Design and continuously operate an enterprise risk management framework spanning risk identification, measurement, mitigation, monitoring, and reporting — contextualized against the organization's obligations, objectives, and risk tolerance.
Establish a disciplined approach to risk prioritization that balances operational efficiency with the rigor required to address high-severity exposures across the enterprise.

Policy, Standards & Controls Governance

Architect and govern the organization's policy and standards issuance lifecycle, ensuring timely coverage of emerging obligations and strategic priorities.
Oversee the design, implementation, and ongoing operation of controls and guardrails that drive adherence to obligations and objectives within defined risk appetite thresholds.
Develop and maintain a structured controls taxonomy and policy hierarchy, ensuring alignment, traceability, and clear ownership across the enterprise.

Enterprise Inventories & Ecosystem Oversight

Own and maintain the enterprise risk registry and control inventory, ensuring completeness, accuracy, and operationalization across all relevant functions.
Provide oversight over the design, quality, and utilization of key risk-related ecosystem inventories, including data inventories, IT asset inventories, and other foundational records management infrastructure.
Champion data quality and governance standards across risk-related inventories, enabling confident risk measurement and management decisions.

Risk Reporting & Executive Communication

Develop and maintain executive-quality reporting on enterprise risk posture, policy and standards coverage, and the efficacy of regulatory and risk-driven controls.
Contextualize risk reporting against the organization's obligations, objectives, and risk appetite — enabling senior leadership and the Board to make well-informed decisions.
Drive continuous improvement of risk metrics, dashboards, and reporting cadences to reflect evolving organizational priorities and stakeholder needs.

AI Governance & Ethics

Coordinate with the Head of AI Governance (in Legal) to manage AI risk.
Own and maintain the AI use-case inventory and the AI use-case risk and ethics evaluation framework, including use-case tiering and risk classification methodologies.
Ensure AI governance practices are aligned with regulatory expectations, ethical principles, and enterprise risk appetite, and that evaluation frameworks evolve in step with the rapidly changing AI landscape.
Partner with product, engineering, legal, and compliance stakeholders to embed AI risk considerations into the design and deployment of AI systems.

External Engagement & Regulatory Representation

Represent the organization on risk, governance, and AI safety topics in interactions with regulators, customers, auditors, and other external stakeholders.
Lead or contribute to the negotiation of contracts, agreements, and licenses with risk and compliance implications, advocating for risk-informed terms and organizational protections.
Monitor the external regulatory and industry landscape to anticipate emerging obligations, translate new requirements into actionable internal frameworks, and proactively position the organization ahead of compliance deadlines.

What We're Looking For

Experience & Background

20+ years of progressive experience in enterprise risk management, compliance, internal audit, or a closely related governance discipline.
Demonstrated track record of designing, implementing, and maturing enterprise risk management frameworks and control environments at scale.
Prior experience owning or significantly contributing to policy and standards governance programs, including the lifecycle management of policies, standards, and controls.
Meaningful exposure to AI governance, responsible AI, or technology risk — with working knowledge of AI risk and ethics frameworks, use-case evaluation methodologies, and emerging AI regulation.
Experience engaging with external regulators, auditors, or enterprise customers on risk and compliance topics; including participation in regulatory examinations, customer due diligence processes, or contract negotiations.

Skills & Capabilities

Exceptional ability to design and communicate governance structures, risk frameworks, and control architectures to both technical and non-technical audiences.
Strong analytical and systems-thinking skills, with the ability to synthesize complex risk landscapes into clear, prioritized frameworks and actionable recommendations.
Demonstrated ability to build and maintain inventories and registries (risk, control, data, asset) with a strong focus on data quality, usability, and organizational adoption.
Excellent written and verbal communication skills, including the ability to develop executive-quality risk reporting and represent the organization credibly in high-stakes external conversations.
Proven ability to influence cross-functional stakeholders and drive alignment on governance priorities without direct authority.

Mindset & Approach

A risk practitioner who operates with both rigor and pragmatism — focused on building governance infrastructure that is operationally effective, not just technically compliant.
Intellectually curious and adaptive, with a commitment to staying current on evolving regulatory requirements, risk management best practices, and AI governance developments.
A trusted, credible voice — internally with leadership and cross-functional partners, and externally with regulators, customers, and the broader governance community.
Highly collaborative and organizationally astute, with the ability to navigate complex stakeholder environments and build durable governance partnerships across the enterprise.
Motivated by building — comfortable operating in ambiguous, fast-moving environments where governance structures are maturing and the work requires both strategic vision and hands-on execution.

What We Offer

We believe that to make intelligence open and accessible to all, you need to start at the foundation. Joining Reflection means building from the ground up as part of a talent-dense team. You will help define our future as a company, and help define the future of open foundational models.

We want you to do the most impactful work of your career with the confidence that you and the people you care about most are supported.

Top-tier compensation: Salary and equity structured to recognize and retain our talent globally.
Stock options: Everyone who joins and contributes to Reflection's success gets to share in the upside through stock options.
Health & wellness: Comprehensive medical, dental, vision, and life, with an annual wellness allowance.
Meals: Lunch and dinner are provided in the office daily.
Life & family: 22 weeks paid parental leave for all new birthing and non-birthing parents, including adoptive and surrogate journeys.
Vacation days: Unlimited paid time off in the U.S. and 30 days in the U.K.
Sponsorship support: We sponsor visas to help exceptional talent join our team and support long-term immigration pathways where applicable.
Team building: We have regular off-sites, happy hours, and team celebrations.

Export Control Notice: This position may require access to technology or source code subject to the U.S. Export Administration Regulations. Any offer of employment for this role may be conditioned on the Company's ability to provide the candidate with access to such technology or source code in compliance with applicable U.S. export control laws, which may require the Company to seek government authorization.