Executive Director, Head of IT Risk & Cyber Controls Testing
The company
Our client is one of the world’s largest global banking groups, with trillions in assets and a fast-growing US franchise. It is investing heavily in its Americas control infrastructure, building out modern risk and control capabilities rather than maintaining legacy ones. You get the stability of a tier-one bank with the pace of a business still in build mode.
The role
You’ll lead the cyber, data and technology controls testing programme for the Americas, a first-line function with visibility right up to senior management. It’s a genuine build opportunity. You’ll shape the testing methodology, set up new monitoring routines, and bring in automation and AI to modernise how controls are tested.
What you’ll be doing
- Leading risk-based testing across cybersecurity, data management and technology controls
- Designing and running control monitoring routines, from walkthroughs and process maps to root cause analysis
- Running deep dives to find control weaknesses, then driving remediation with technology owners
- Reporting findings and trends to senior stakeholders across the first line, second line and internal audit
- Shaping the testing methodology, including the use of AI and automation tools
What you’ll bring
- 10+ years in IT audit, technology risk or first-line control testing within financial services
- Implementation of risk and control frameworks is essential
- Hands-on NYDFS 500 experience, implementing, monitoring or certifying compliance
- Strong grasp of NIST CSF / 800-53, ISO 27001, FFIEC, CRI Profile or COBIT
- A track record of building or leading control testing programmes, not just executing them
- CISA, CISSP, CISM, CRISC or CIA preferred
Head of IT Risk & Cyber Controls Testing in charlotte at Unknown Company
This position is listed as full time and onsite.