VP, CTIS Risk Oversight Lead
Core
Lead independent oversight and monitoring of risks and controls around the Firm's cyber, technology and information security risks.
Role type
Senior IC risk oversight lead (cyber/technology)
Builds
Risk management frameworks, control evaluations, executive-level risk reporting
Domain
Financial services / Cybersecurity and Technology Risk
Deliverable
dashboards & analysis
Required skills
Risk management, Control evaluation, Team leadership, Stakeholder management, Regulatory compliance, Strategic transformation assessment, KRIs and metrics monitoring, Policy and governance enforcement, Executive reporting, Thought leadership
Preferred skills
Operational knowledge of IT resilience, architecture, asset management, vulnerability management, cyber threat intelligence, network security, IAM, change management
Technologies
None explicitly listed as tools
Responsibilities
Provide independent oversight and challenge of the Firm's cybersecurity and technology organizations risk management activities. Manage the team in assessing the effectiveness of risk and control frameworks. Lead the team in review and challenge of risk assessments, control evaluations, issue remediation plans, and risk acceptance decisions. Build and maintain strong positive relationships and partner with Technology, Non-Financial Risk, Legal, Audit, and business stakeholders. Evaluate new technology initiatives and strategic transformation programs from a risk perspective. Manage the team in monitoring key risk indicators (KRIs), metrics, and trends. Support regulatory examinations, internal audits, and governance committee reporting. Drive consistency in risk management practices. Manage the team in preparing executive-level risk reporting and deliver presentations for senior management. Contribute to the development and enhancement of Enterprise Risk Management and NFR programs. Provide thought leadership on emerging technology, cyber threats, and regulatory developments.
Seniority
VP, leadership level