Senior Director, Tech Risk & Analysis

What you'll do

• Lead a team to coordinate and execute on audit, regulatory, and executive engagements.
• Assess current state to identify gaps, cyber risks, threats, and business impacts.
• Define mitigation strategies and prioritize the escalation of high-risk vulnerabilities.
• Participate in the design and implementation of cyber control programs.
• Analyze data using reporting tools to inform policies and drive risk management change.
• Research industry practices and regulatory changes to recommend practical cybersecurity solutions.
• Advise Accountable Executives on cyber-related risks through formal risk forums and processes.
• Manage the lifecycle of programs by documenting action plans, impediments, and stakeholder engagement.

What we're looking for

• At least 12 years of experience in technology, cybersecurity, technology auditing, systems risk management, technology risk assessments, resilience engineering, chaos engineering, or site reliability engineering.
• Bachelor’s Degree in Information Technology, Cybersecurity, or equivalent (preferred).
• 14+ years of Risk Management experience in Cyber or Information Security practice (preferred).
• 12+ years of experience in cloud computing (AWS, GCP, or Azure) (preferred).
• 12+ years of experience in a second-line or oversight role at a financial institution or regulatory agency (preferred).
• Professional Security Certification or Professional Risk Management Certification (preferred).
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Open FAIR Certified (preferred).