10079845-WD Cybersecurity GRC - AVP (Open)
Core
AVP supporting governance of the cyber risk lifecycle and Cyber Risk Institute (CRI) Profile maturity program within the CISO of the Americas team.
Role type
Senior IC Cybersecurity GRC professional
Builds
Governance processes, maturity trackers, and regulatory response coordination for cyber risk
Domain
Financial Services / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
Cyber risk lifecycle management, GRC framework knowledge (NIST CSF, CRI Profile, FFIEC, NYDFS, PCI), audit coordination, process documentation, stakeholder management, KRI/KPI reporting
Preferred skills
Big 4 or internal audit experience, cloud security concepts, GRC platform experience, CRISC/CISA/CompTIA Security+ certifications
Technologies
NIST CSF 2.0, CRI Profile, NIST SP 800-53, FFIEC IT Handbook, NYDFS Part 500, OCC, FRB expectations, PCI
Responsibilities
Coordinate lifecycle activities across teams and track status/gaps; Review lifecycle outcomes for completeness and traceability; Compile KRI/KPI data and prepare governance reporting; Support responses to internal audit, second line, and regulatory requests; Maintain maturity trackers and remediation status; Escalate missed milestones and unresolved dependencies to management
Seniority
Senior, hands-on IC
