Technology & Data Risk Lead

KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries.

KKR’s Enterprise Risk Management (“ERM”) function is responsible for ensuring the consistent application of the risk management framework globally to help KKR achieve its strategic objectives and operational efficiency while operating within the firm’s risk appetite.

ERM’s objectives:

• Identify and monitor risk from the firm’s verticals to understand global, horizontal risk trends and issues
• Assess and measure risks, control gaps or enhancements for risk relevant programs
• Aggregate risk information for monitoring and reporting; inform risk-based decision making

With a focus on creating a proactive risk management culture, embedding risk awareness into decision making processes across the firm, as part of our global organization, you will have the opportunity to contribute to an integrated approach to risk management, helping to shape our firm’s approach to risk - making a meaningful impact on our ability to navigate an increasingly complex risk landscape.

KKR is seeking a high-performing Technology & Data Risk leader to join its Enterprise Risk Leadership Team within the Risk Domain Office. This role will be based in our New York office, 5 days per week.

The Risk Domain Office is responsible for providing independent oversight of the firm’s most significant enterprise risk domains and developing an integrated view of risk across businesses, functions, and geographies. As a core component of KKRs Enterprise Risk Operating Model, the team plays a critical role in identifying emerging risks, synthesizing cross-risk insights, strengthening enterprise risk oversight, and supporting informed decision-making at the executive and board levels.

This role is a senior leadership position within the Risk Domain Office and will play a central role in shaping the continued evolution of KKR’s risk domain oversight capabilities. Working in close partnership with Enterprise Risk leadership, the successful candidate will help define priorities, mature oversight practices, strengthen enterprise risk integration, and drive a proactive and insight-driven approach to risk management across the firm.

The successful candidate will provide direct oversight of one or more enterprise risk domains, with a particular focus on Technology and Data Risk, while also maintaining an enterprise-wide perspective across the broader risk landscape. They will work closely with business leaders, technology leadership, control functions, regional risk teams, and governance forums to identify emerging risks, challenge risk management practices, and provide integrated risk perspectives that support informed decision making. 

This role offers broad exposure across KKR’s global businesses, including Asset Management, Insurance, Strategic Holdings, and Corporate Functions. The successful candidate will be a well-rounded risk leader with strong risk management expertise, sound judgment, and the ability to influence stakeholders across a complex organization. They will be expected to exercise independent judgment, provide effective challenge, and translate complex and interconnected risks into clear, actionable insights for senior management, risk committees, and board-level governance forums.

This is a unique opportunity to play a foundational leadership role within a growing enterprise risk function, helping shape the future development of KKR’s Risk Domain Office and strengthening how the firm understands, oversees, and manages risk at scale.

• 12–15+ years of experience in Enterprise Risk, Technology Risk, Operational Risk, Non-Financial Risk, Risk Advisory, or related disciplines, ideally within Financial Services, Asset Management, Insurance, Banking, or a leading consulting firm.
• Demonstrated experience leading enterprise-wide risk programs, oversight functions, or risk transformation initiatives within complex organizations.
• Strong understanding of enterprise risk management principles, risk governance frameworks, and industry risk management practices, with the ability to apply them pragmatically across diverse business environments.
• Experience engaging directly with senior executives, risk committees, and board-level governance forums, providing effective challenge and influencing key decisions.
• Strong understanding of Technology, Cyber, and Data Risk management practices, including oversight of technology-enabled risks, operational resilience, cyber security, and data governance.
• Proven ability to build, mature, and enhance risk management capabilities, frameworks, and operating models.
• Experience operating across multiple risk domains, balancing deep domain expertise with an enterprise-wide perspective on risk.
• Track record of leading cross-functional initiatives involving risk management, governance, regulatory change, business transformation, or operating model enhancement.
• Experience working across businesses, functions, and geographies, building credibility and influencing outcomes within complex stakeholder environments.
• Exceptional communication skills, with the ability to translate complex risk issues into clear, actionable insights for senior management and governance forums.
• Bachelor's degree in Business, Risk Management, Economics, Finance, Management, Engineering, Technology, or a related discipline, or equivalent professional experience.

• Play a key leadership role in the continued development and maturation of KKR’s Risk Domain Office, helping define priorities, operating practices, and strategic objectives for the function.
• Drive the evolution of risk domain oversight capabilities and associated operating model components, including risk intelligence, risk integration, and governance activities.
• Partner with Enterprise Risk leadership to establish consistent approaches to risk oversight, challenge, reporting, and governance across risk domains.
• Shape enterprise risk priorities, thematic reviews, and strategic initiatives that strengthen the firm's understanding and management of risk.
• Coach and develop risk professionals within the Enterprise Risk function and contribute to the continued growth and maturity of the broader team.
• Foster a proactive, insight-driven risk culture that supports accountability, transparency, and effective decision making

• Lead independent oversight of Technology and Data Risk across the firm.
• Develop and maintain an enterprise-wide view of technology-related risk exposures, emerging threats, and risk management effectiveness.
• Promote risk-informed decision making through independent challenge, sound judgment, and balanced commercial perspective.
• Partner with Technology, Information Security, Operations, and key business leadership to promote transparency and effective management of technology-related risks.
• Serve as a senior advisor to risk committees, governance forums, and leadership teams on matters relating to enterprise risk and technology-related risks.

• Develop integrated perspectives on the firm's most significant risks, identifying interdependencies, concentrations, and emerging themes across risk domains, businesses, and geographies.
• Lead enterprise risk synthesis activities, helping establish a consolidated view of the firm's key risks and areas requiring management attention.
• Oversee thematic reviews, scenario analysis, and forward-looking assessments that strengthen understanding of the firm’s evolving risk profile.
• Drive effective escalation and discussion of significant risk issues, emerging concerns, and areas requiring management action.
• Translate complex risk information into clear and actionable insights for executive leadership and governance forums.

• Strong understanding of enterprise risk management principles, governance frameworks, and industry risk management practices, with the ability to apply them pragmatically across a complex global organization.
• Ability to develop an integrated enterprise-wide view of risk, identifying key themes, interdependencies, emerging risks, and areas requiring management attention.
• Strong risk judgment, combining analytical rigor, commercial awareness, and the ability to assess complex and ambiguous risk issues.
• Demonstrated ability to synthesize complex information and translate it into clear, actionable insights for senior management, governance forums, and board-level stakeholders.
• Confidence and credibility to provide independent challenge, influence decision-making, and engage effectively with senior executives and business leaders.
• Strong understanding of Technology, Cyber, and Data Risk management practices and their interaction with broader enterprise risk exposures
• Exceptional written and verbal communication skills, with the ability to communicate complex concepts clearly and persuasively to diverse audiences.
• Strong stakeholder management and relationship-building skills, with the ability to establish credibility and influence outcomes across businesses, functions, regions, and levels of seniority.
• Leadership capability with experience driving change, building capabilities, and leading complex initiatives in dynamic and evolving environments.
• Intellectual curiosity and a proactive approach to identifying risks, opportunities, and areas for continuous improvement.
• High levels of integrity, accountability, and personal ownership, coupled with the confidence to challenge constructively and uphold strong risk management standards.