This role pays more than
80%
of similar roles. Most pay
$126,200–$184,925
— the shaded band above.
At the midpoint, this role pays about
$195k
versus about
$156k
for comparable roles.
Based on 240 similar postings.
Employer
About Fiserv
Fiserv is a global leader in financial services technology, providing core banking platforms, payment processing, digital banking, and merchant acquiring solutions to financial institutions and businesses. Industry: Financial Technology & Payments
Fiserv currently has
84 open roles
on FindRole.
Listed pay typically runs
$110,000–$186,000
across 56 roles with salary data.
As a Cyber Risk Controls Officer, you will serve as the First Line of Defense Controls Lead for the Business Unit. You will partner with Risk, Audit, Security, and technology teams to strengthen cyber risk governance and control execution across your assigned portfolio. Your daily responsibilities include assessing applications and processes for compliance with corporate policies, identifying gaps, and coordinating remediation plans with technical owners. You will provide subject matter expertise on policy standards, manage control deficiencies, and deliver executive-level reporting on risk posture and key metrics. The role requires extensive experience in cyber risk management, infrastructure technology including mainframe and cloud systems, and cross-functional coordination. Preferred skills include knowledge of SDLC, NIST, ISO 27001, COBIT, PCI DSS, and ITIL frameworks to solve complex security challenges within the financial services industry.
Serve as the First Line of Defense Controls Lead for the Business Unit to ensure cyber risk requirements are met.
Assess applications and processes for compliance with corporate policies, standards, and control requirements.
Provide subject matter expertise to guide development teams in implementing risk mitigation strategies.
Track and report on the status of control deficiencies, risk issues, and remediation efforts until closure.
Deliver executive-level reporting on cyber risk posture, key metrics, and emerging issues.
Manage action plans and evidence collection with stakeholders to ensure alignment with firm standards.
Support audit responses and regulatory examinations by ensuring all documentation and artifacts are current.
Drive consistent governance routines and risk treatment processes across the assigned portfolio.
What we're looking for
10+ years of experience in cyber, risk, controls, or information security risk management including assessing control effectiveness and managing remediation.
10+ years of experience in technology risk, compliance, controls governance, or related roles within a complex enterprise environment.
5+ years of experience partnering with server (distributed, mainframe, cloud) and network infrastructure technology.
5+ years of experience coordinating risk reviews, control assessments, issue management, and cross-functional remediation activities with technical and non-technical stakeholders.
Bachelor’s degree in computer science, a relevant field, or an equivalent combination of education, work, and/or military experience.
Well versed in all aspects of Software Development Lifecycle (SDLC) and best practices (preferred).
Experience with cyber control frameworks such as NIST, ISO 27001, COBIT, PCI DSS, and ITIL (preferred).
Cybersecurity
Information Protection
Threat and Vulnerability Management
Application Security
Security Architecture
AI
NIST-CSF
800-53
COBIT
CCM
MITRE ATT&CK
FFIEC
DORA
RCSA
KRI