The Engineering Risk & Resilience team partners across Bloomberg Engineering to identify, understand, and reduce the risks that matter most to how we build and operate technology. Our work sits at the intersection of engineering, risk management, and regulation, with a simple goal: help engineering teams do the right thing with minimal disruption to product development.

We design practical, engineering-owned risk management solutions to address technology risk. This often means working across Engineering, Security, and Technology Product Owners; collaborating closely with Legal, Compliance, and Risk; engaging Product and Data teams on technology risk considerations; and translating complex regulatory expectations into approaches that engineers can actually use. We care deeply about mitigating risk, and we’re equally diligent about minimizing unnecessary process and bureaucracy.

The Role

We’re looking for an experienced Technology Policy Writer to help shape and document Bloomberg’s technology standards. In this role, you’ll take newly refreshed controls and turn them into clear, usable standards that articulate what’s required and how it applies, in language that resonates with technologists.

This is a hands-on writing and synthesis role, ideal for someone who enjoys making complex technology risk concepts understandable, aligning disparate requirements into a coherent structure, and building trust with engineers and risk partners alike.

You’ll work closely with the Global Head of Policy, engineering leadership, Risk and Compliance partners, and subject matter experts across the organization to draft, socialize, and publish documentation. Your work will help ensure Bloomberg’s technology standards meet regulatory expectations, support operational resilience, and remain practical to implement at scale.

What You’ll Do

• Lead the development and drafting of technology risk and compliance standards covering areas such as change management, recovery and continuity, and security.

• Translate regulatory obligations and internal control requirements into clear, actionable standards that support policy objectives.

• Produce well-written, easy-to-digest standards documents that faithfully reflect underlying controls while remaining accessible to engineers.

• Ensure strong traceability between controls, policies, standards, and regulatory requirements, maintaining alignment with Bloomberg’s Common Control Framework structure and language.

• Map and realign industry standards and regulatory frameworks (e.g., NIST, DORA) to internal controls to support compliance and auditability.

• Act as a trusted partner to engineers, risk professionals, compliance managers, and senior leaders, facilitating the flow of information and informed decision-making.

• Contribute, as needed, to broader Engineering COO initiatives aligned with the team’s mission.

What You Bring

• 10+ years of experience writing technology documentation, policies, or standards in a technology company, ideally a cloud provider, SaaS company, or regulated environment.

• Strong understanding of risk management concepts with prior experience in a first- or second-line role.

• Exceptional written communication skills, with a proven ability to simplify complex technical and risk concepts into clear, practical guidance.

• Strong analytical judgment and problem-solving skills, with the confidence to work independently in ambiguous or evolving situations.

• A track record of effectively engaging stakeholders at all levels, from engineers to senior leadership.

• An inclusive, collaborative mindset that values diverse perspectives and actively seeks feedback.

• Bachelor’s degree or higher in Technology, Information Systems, or a related discipline (or equivalent practical experience).

• Comfort working across multiple technology domains, leveraging existing documentation and frameworks rather than specializing narrowly in one area.

We’d Love to See

• 10+ years of experience in technology risk, compliance, policy development, or risk management within a financial institution, technology company, or regulatory body.

• Deep subject matter expertise in at least two of the following areas: information security, technology operations, or business continuity management.

• Experience building or shaping policy programs, setting direction, and executing against a longer-term strategy.

If this role aligns with how you think about technology, risk, and good writing and you want to make a meaningful, organization-wide impact we’d love to hear from you.

Salary Range = 1,700 - 2,000 USD Daily