10079845-WD Cybersecurity GRC - AVP (Open)
Core
AVP supporting governance of the cyber risk lifecycle and CRI Profile maturity program within the CISO of the Americas team.
Role type
Senior IC Cybersecurity GRC professional
Builds
Governance processes, maturity trackers, and regulatory response coordination for cyber risk
Domain
Financial Services / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
Cyber risk lifecycle management, GRC framework implementation, audit coordination, regulatory compliance (NIST CSF, CRI Profile, NYDFS, PCI), stakeholder coordination, process documentation, KPI/KRI reporting
Preferred skills
Big 4 or internal audit experience, CRI Profile maturity assessments, CRISC/CISA/CompTIA Security+ certifications, GRC platform experience, cloud security concepts
Technologies
NIST CSF 2.0, CRI Profile, NIST SP 800-53, FFIEC IT Handbook, NYDFS Part 500, OCC/FRB expectations, PCI
Responsibilities
Coordinate lifecycle activities and track status/gaps across contributing teams; Maintain maturity trackers and prepare reporting for CRI Profile assessments; Compile KRI/KPI data for governance reporting; Support audit and regulatory examination responses; Escalate process issues and unresolved dependencies to management
Seniority
Senior, hands-on IC