Head of IT Risk & Cyber Controls Testing

Executive Director, Head of IT Risk & Cyber Controls Testing

Is your CV ready If so, and you are confident this is the role for you, make sure to apply asap.
The companyOur client is one of the world’s largest global banking groups, with trillions in assets and a fast-growing US franchise. It is investing heavily in its Americas control infrastructure, building out modern risk and control capabilities rather than maintaining legacy ones. You get the stability of a tier-one bank with the pace of a business still in build mode.
The roleYou’ll lead the cyber, data and technology controls testing programme for the Americas, a first-line function with visibility right up to senior management. It’s a genuine build opportunity. You’ll shape the testing methodology, set up new monitoring routines, and bring in automation and AI to modernise how controls are tested.
What you’ll be doingLeading risk-based testing across cybersecurity, data management and technology controlsDesigning and running control monitoring routines, from walkthroughs and process maps to root cause analysisRunning deep dives to find control weaknesses, then driving remediation with technology ownersReporting findings and trends to senior stakeholders across the first line, second line and internal auditShaping the testing methodology, including the use of AI and automation tools
What you’ll bring xzbcwsv 10+ years in IT audit, technology risk or first-line control testing within financial servicesImplementation of risk and control frameworks is essentialHands-on NYDFS 500 experience, implementing, monitoring or certifying complianceStrong grasp of NIST CSF / 800-53, ISO 27001, FFIEC, CRI Profile or COBITA track record of building or leading control testing programmes, not just executing themCISA, CISSP, CISM, CRISC or CIA preferred