Head of IT Risk & Cyber Controls Testing

Executive Director, Head of IT Risk & Cyber Controls Testing

Is your CV ready If so, and you are confident this is the role for you, make sure to apply asap.

The company

Our client is one of the world’s largest global banking groups, with trillions in assets and a fast-growing US franchise. It is investing heavily in its Americas control infrastructure, building out modern risk and control capabilities rather than maintaining legacy ones. You get the stability of a tier-one bank with the pace of a business still in build mode.

The role

You’ll lead the cyber, data and technology controls testing programme for the Americas, a first-line function with visibility right up to senior management. It’s a genuine build opportunity. You’ll shape the testing methodology, set up new monitoring routines, and bring in automation and AI to modernise how controls are tested.

What you’ll be doing

• Leading risk-based testing across cybersecurity, data management and technology controls
• Designing and running control monitoring routines, from walkthroughs and process maps to root cause analysis
• Running deep dives to find control weaknesses, then driving remediation with technology owners
• Reporting findings and trends to senior stakeholders across the first line, second line and internal audit
• Shaping the testing methodology, including the use of AI and automation tools

What you’ll bring

xhqgsiq
• 10+ years in IT audit, technology risk or first-line control testing within financial services
• Implementation of risk and control frameworks is essential
• Hands-on NYDFS 500 experience, implementing, monitoring or certifying compliance
• Strong grasp of NIST CSF / 800-53, ISO 27001, FFIEC, CRI Profile or COBIT
• A track record of building or leading control testing programmes, not just executing them
• CISA, CISSP, CISM, CRISC or CIA preferred