VP Technology Risk and Controls

This team is responsible for assessing the bank’s technology platforms to identify potential security risks and ensuring that all platforms are ready and secure for adoption, implementing remediation measures as needed to maintain the highest level of cyber security and technology control. This role will be performing testing around IT General and Application Controls which will require liaising with various stakeholders — including Technology Management, Technology Risk & Controls as well as external/internal auditors — to help facilitate execution and reporting across the global technology and technology risk functions. Successful execution of responsibilities requires IT Audit experience and the ability to multiple stakeholders at all levels (e.g., Product Owners, Engineers, etc.)

Required Qualifications, Capabilities, and Skills:7+ years of IT controls experience as a practitioner / lead with a “Big Four” or top IT consulting firm. Manager level audit experience is required. Hands-on experience in performing audits of IT general controls and testing (SOx / SOC 1 / SOC 2), including but limited to: IT infrastructure layers such as OS (Linux, Unix, Windows) and databases (Oracle, MySQL, etc.)Hands-on experience with auditing: Public/private Cloud technologies (Cloud Foundry, AWS, Azure, GCP, etc.)Technology platforms (ServiceNow, Jenkins, SailPoint, etc Strong capacity for interpreting architecture diagrams and understanding new technologies, both through workshops and independent research, in order to scope and identify areas of potential control bypass Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection Ability to identify and define key control risks and recommend solutions to increase the technology controls posture Ability to simultaneously lead multiple on-going assessments across different groups of stakeholders History of successfully leading teams and developing the skillsets of the individuals reporting into you Good presentation skills. Strong organizational, verbal and written — including documentation and reporting — communication skills Ability to lead meetings, problem solving to identify solutions to issues and deliver quality results in a deadline-driven environment .Ability to work effectively in a global team environment and drive results in a matrixed organization 7+ years in IT Controls, IT Risk, IT general controls & testing