AVP, Technology & Cyber Risk Management US
Core
Leads second-line technology and cyber risk oversight for the US business group, shifting from reactive to proactive challenge-partnering with first-line leaders to ensure executive assurance on risk posture and alignment with risk appetite.
Role type
Senior IC technology and cyber risk manager (second-line)
Builds
Independent second-line oversight program, risk reporting to committees, and continuous improvement of the US technology and cyber risk program
Domain
Insurance / Technology Risk Management / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Technology and cyber risk oversight, Risk and Control Self-Assessments (RCSAs), Key Risk Indicators (KRIs), Operational Risk Events (OREs), NIST Cybersecurity Framework, executive-level presentation, strategic planning
Preferred skills
CISSP, CISM, CISA, ITIL certifications, change leadership, relationship management
Technologies
NIST Cybersecurity Framework
Responsibilities
Develop and execute independent second-line oversight program; Challenge technology and security risk policies and RCSAs; Report quarterly on technology risk profile to Operational Risk and Compliance Committee; Lead execution and continuous improvement of the US technology and cyber risk program; Advise and support regional risk professionals; Lead one direct report
Seniority
Senior, hands-on IC with leadership responsibilities