Lead, Controls Assurance
Core
Lead the Controls Assurance Program to develop, evaluate, test, and strengthen internal security controls across the organization, ensuring compliance with regulations and client obligations.
Role type
Senior individual contributor, Security GRC Lead
Builds
Programmatic readiness to respond to security risks and mature controls automation
Domain
Asset management, Security Governance, Risk, and Compliance (GRC)
Required skills
Control testing, risk assessment, regulatory compliance, audit methodologies, controls automation, data analysis, remediation tracking, stakeholder partnership, framework design (NIST, SOC 1/2, CIS), executive reporting
Preferred skills
U.S. and global asset management regulatory context experience, exposure to SEC/CFTC regimes, controls automation platforms
Technologies
NIST, SOC 1, SOC 2, CIS, data analysis tools, controls automation platforms
Responsibilities
Develop and lead the Controls Assurance Program; Plan and execute control testing plans; Gather and review process documentation and risk-control matrices; Identify control gaps and document findings; Partner with owners to remediate issues; Support audit requests; Prepare assurance reports and dashboards; Drive continuous improvement of testing methodologies and automation; Develop risk reporting for executive leadership; Stay current on regulatory changes.
Seniority
Senior, hands-on IC