Vice President, Technology Risk, Security Architecture

What you'll do

• Lead a team to assess and manage the firm's portfolio of vendor Information Security risks.
• Conduct deep-dive technical cybersecurity assessments for vendor logical security controls, cloud, mobile, and applications.
• Design and implement security strategies, requirements, and comprehensive cybersecurity architectures using threat modeling.
• Develop and document security measures, controls, and guardrails to protect data, APIs, and network infrastructure.
• Negotiate and review Information and Cyber Security contractual requirements for the vendor ecosystem.
• Perform cyber risk assessments to drive risk reduction across the firm's technology portfolio.
• Guide technology innovation by assessing security risks related to Cloud computing, AI, and ML.

What we're looking for

• At least 6 years of relevant work experience.
• Well versed in technical cybersecurity risk assessments and providing security measures or solution technical controls.
• Ability to develop, evaluate, solution, and document security measures, controls, and guardrails for data, applications, APIs, and infrastructure.
• Experience designing or implementing security strategy and architecture through threat modeling and data flow analysis.
• Knowledge of the regulatory landscape and its applicability to the vendor ecosystem.
• Working knowledge of new technologies including Cloud computing, AI, ML, and zero trust.
• Working knowledge of the overall Procurement process and Technology Risk's role within it.
• Bachelor of Science in a relevant technical or risk management field (preferred).
• Prior experience conducting IT/cyber security assessments such as Control or Design Reviews (preferred).
• One or more certifications including CISSP, CCSP, GSEC, CEH, CCNA, CCNP, Solution Architect, Security+, SSCP, or CASP+ (preferred).