Cyber Security Technical GRC – VP

** Job Summary****:
** This role is a member of the CISO of America’s team, with primary focus on the Enterprise Information Systems (EIS) Governance, Risk, and Compliance (GRC) team. The position requires a deep understanding of how cloud environments are well architected and identifying risks associated with the services utilized and challenging the architecture(s) and implementation.

As an individual contributor, you will act within the first line of defense, contributing to complex, critical disciplines including Cloud Security Governance, Policy Management, Cybersecurity Controls & Reporting, and Cyber Risk Quantification across hybrid (cloud and on premise) environments. The role emphasizes comprehensive risk management—identifying, assessing, and managing inherent, control, and residual risks—while
** Responsibilities****:
**** Qualifications****:
** of experience across risk management, cloud information security governance, and/or IT audit; prior audit experience is a plus.

Experience auditing cloud technologies, wearing multiple hats in GRC contexts, writing executive-ready reports, and relaying risk to executives.

High technical knowledge across cybersecurity domains (IAM, Data Security, Configuration Management, Log Generation, Incident Response, Security risk Assessment/Testing Methodologies, Secure SDLC), with specific experience evaluating the adequacy and efficiency of Knowledge of domestic and international banking regulations (e.g., Reg W, Basel II, FFIEC, GDPR) and experience with enforcement agency oversight activities (e.g., MRAs, consent orders), especially within systemically important financial institutions.
#J-18808-Ljbffr