24 months as Associate Specialist/Senior Consultant
15–20 years of experience in IT Audit, Cybersecurity, IT Risk & Control, or equivalent experience with a proven track record of leading complex initiatives
Specialized depth of expertise in cyber and technology risk management within the financial services sector
Demonstrated ability to develop and implement enterprise-level risk management solutions, utilizing advanced security controls and cutting-edge technologies
Exceptional analytical, leadership, and communication skills, capable of influencing high-level decision-making and driving enterprise-wide enhancements
Proven success managing teams, fostering a culture of continuous improvement, and innovating testing practices
Proficiency in Microsoft Office 365 and advanced GRC platforms (e.g., ServiceNow, Fusion), leveraging these tools to derive strategic insights and streamline risk reporting and remediation efforts
Responsibilities
Test, validate, and continuously refine advanced control testing frameworks and methodologies, incorporating innovative techniques to address complex or emerging risks
Conduct and oversee comprehensive, high-risk assurance reviews, ensuring that test plans, workpapers, and outcome reports meet the highest quality standards
Lead the development, implementation, and optimization of new controls, collaborating with executive stakeholders to ensure alignment with the organization’s strategic objectives
Evaluate cyber risk and non-cyber risk controls at an enterprise scale, identifying systemic issues, influencing remediation strategies, and driving continuous improvements that reduce risk exposure
Provide strategic direction for second-line governance activities, including Risk Identification and Change Initiative Risk Assessments, offering policy-level recommendations
Communicate challenging or sensitive findings effectively to senior executives and risk committees, negotiating differing viewpoints to achieve consensus on policy changes and remediation plans
Leverage deep expertise in risk frameworks and industry best practices to anticipate future regulatory, technological, and market challenges, proactively adjusting testing strategies
Lead functional teams or projects, managing moderate resource requirements and complexities, while mentoring managers and senior associates to build a pipeline of future leaders
Maintain expert-level understanding of banking/financial regulatory requirements, ensuring that control testing not only meets current standards but anticipates future regulatory trends