Vice President, IT Risk Governance
Location: New York, NY (Hybrid)
Compensation: $170,000 - $210,000 Base
We are currently partnered with a leading banking institution seeking a Vice President, IT Risk Governance to join its growing team in New York City. This individual will play a key role in advancing and strengthening the firm's technology risk governance framework, working closely with senior stakeholders across Technology, Risk Management, Information Security, Compliance, and Internal Audit.
The ideal candidate will have 8+ years of experience within IT Risk Management, Technology Risk, IT Audit, Information Security Governance, or a related discipline, preferably within the banking or broader financial services industry. This position offers the opportunity to influence enterprise-wide technology risk strategy while helping ensure the organization maintains a robust and effective control environment.
Responsibilities
- Support the ongoing development, implementation, and enhancement of the firm's IT Risk Governance framework, policies, standards, and procedures.
- Establish and strengthen controls across the enterprise to proactively identify, assess, mitigate, and monitor technology and cybersecurity risks.
- Partner with business, technology, and risk stakeholders to ensure adherence to the firm's IT Risk Governance program and drive continuous improvement initiatives.
- Review, challenge, and oversee technology risk assessments to ensure risks are appropriately identified, evaluated, and documented.
- Assess the design and operating effectiveness of technology controls and provide credible challenge where necessary.
- Facilitate governance forums, working groups, and committee reporting related to technology and cybersecurity risk.
- Drive remediation efforts for identified control gaps, audit findings, regulatory issues, and risk management concerns.
- Collaborate with Information Security, Operational Risk, Compliance, and Internal Audit teams to ensure alignment of risk management activities.
- Stay informed of evolving regulatory requirements, industry standards, and emerging technology risks to recommend enhancements to the governance framework.
Qualifications
- 8+ years of experience in IT Risk Management, Technology Risk, IT Audit, Information Security Governance, Operational Risk, or a related function.
- Relevant certification such as CISSP, CISA, etc.
- Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, or a related field.
- Prior experience within banking, financial services, fintech, or another highly regulated industry strongly preferred.
- Strong understanding of technology risk frameworks, governance practices, and internal control concepts.
- Experience conducting or reviewing technology risk assessments and evaluating control effectiveness.
- Familiarity with industry frameworks and standards such as NIST, COBIT, ISO 27001, ITIL, and FFIEC guidance.
- Knowledge of cybersecurity risk management, cloud risk, third-party risk, and operational resilience concepts.
- Excellent communication and stakeholder management skills, with the ability to influence senior leadership.
- Proven ability to manage multiple priorities and work effectively across complex organizational structures.