About this opportunity
Madison-Davis, LLC lists this Head of Cyber and IT Risk Management (SVP) opportunity in new york city, New York. Review the employer’s description below for duties, qualifications and application requirements.
Job description
A leading financial-services organization is seeking a Senior Vice President to lead its Cyber and IT Risk Management function.
This executive will provide independent risk oversight and credible challenge across technology and cybersecurity, helping the organization identify, assess, communicate, monitor, and mitigate material risks across a complex technology environment.
The position requires a combination of technical credibility, enterprise-risk expertise, executive communication, and results-oriented leadership. The successful candidate will lead a blended team while partnering with technology, cybersecurity, operational risk, enterprise risk, Internal Audit, and senior executives.
Responsibilities
Lead the enterprise Cyber and IT Risk Management function
Establish the strategy, operating model, and priorities for technology-risk oversight
Assess inherent and residual technology and cybersecurity risks
Evaluate the design and operating effectiveness of mitigating controls
Provide constructive, evidence-based challenge to technology and cybersecurity leaders
Lead technology and cyber risk assessments
Establish risk-based testing, monitoring, and analytics
Identify risk concentrations, emerging risks, and control weaknesses
Translate complex technical issues into clear business and enterprise-risk terms
Communicate material risks and remediation priorities to senior executives and governance forums
Evaluate cybersecurity processes, vulnerabilities, incidents, architecture, and controls
Challenge risk acceptance and remediation decisions when residual risk remains excessive
Drive complex and long-running remediation initiatives through closure
Track whether risk initiatives produce measurable risk reduction
Partner across technology, cybersecurity, enterprise risk, operational risk, and Internal Audit
Lead and develop a distributed team of employees, contractors, and offshore resources
Improve accountability and effectiveness across the risk-management function
Role Requirements
Significant leadership experience in cyber risk, IT risk, technology risk, operational risk, or a closely related discipline
Strong understanding of enterprise and operational risk management
Technical experience or foundation in cybersecurity, engineering, infrastructure, development, architecture, or a similar field
Ability to assess complex technology environments and identify material risks
Experience evaluating control design, operating effectiveness, mitigating controls, and residual risk
Broad knowledge of cybersecurity practices and control domains
Experience leading risk assessments, testing, monitoring, analytics, and remediation
Ability to provide credible challenge to senior executives
Demonstrated success driving risk initiatives and remediation through completion
Strong executive-level communication and presentation skills
Experience within financial services or another highly regulated enterprise
Knowledge of NIST CSF, FFIEC, or comparable cyber and financial-services risk frameworks
Experience leading employee, contractor, and distributed resources
Ability to work onsite in the Dallas–Fort Worth area approximately three days per week
Ability to travel periodically to California
Nice to Have
Banking experience
CISA, CISSP, CRISC, CDPSE, or comparable certification
Experience across first, second, and third lines of defense
Executive risk or governance-committee presentation experience
Offshore-team leadership
Public-cloud security-risk experience
Risk-analytics and risk-based control-testing transformation
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.