AVP , Technology Risk and Control - SOX and SOC Programs

Who We Are

At Corebridge Financial, we believe action is everything. That’s why every day we partner with financial professionals and institutions to make it possible for more people to take action in their financial lives, for today and tomorrow.

We align to a set of Values that are the core pillars that define our culture and help bring our brand purpose to life :

• We are stronger as one :
  We collaborate across the enterprise, scale what works and act decisively for our customers and partners.
• We deliver on commitments :
  We are accountable, empower each other and go above and beyond for our stakeholders.
• We learn, improve and innovate :
  We get better each day by challenging the status quo and equipping ourselves for the future.
• We are inclusive :
  We embrace different perspectives, enabling our colleagues to make an impact and bring their whole selves to work.

The Information Technology organization is the technological foundation of our business and works in collaboration with our partners from across the company. The team drives technology and digital transformation, partners with business leaders to design and execute new strategies through IT and operations services and ensures the necessary IT risk management and security measures are in place and aligned with enterprise architecture standards and principles.

The Technology Risk and Controls (TRC) Assistant Vice President is an integral team member and will report to the Vice President of TRC. This position is responsible for managing audit risk within the organization. This includes all activities related to external / internal audits (Sarbanes‑Oxley, SOC reports, etc.) and key transformation initiatives. This position will be responsible for effectively collaborating with key stakeholders across the enterprise and lines of defense to ensure risks are being managed effectively and efficiently.

This includes integration of activities within the broader controls group as required. This individual will be accountable for providing strategic risk guidance and maturation of key controls in the organization.

• Act as the audit interface to manage scope, quality of responses, and interactions.
• Implement and oversee controls relating to the programs that are formally defined to address Internal Controls over Financial reporting (SOX) and other key transformation initiatives within the organization.
• Work with Technology teams, specifically within the Insurance & Retirement business unit, to ensure adequate preparation for upcoming audits and exams.
• Maintain and manage the Process, Risk, and Controls (PRC) library.
• Ensure ownership and management of program controls and compliance mandates.
• Enhance the process to ensure that Corebridge is meeting all internal standards and external audit requirements.
• Manage and prioritize control issue remediation processes to ensure that the underlying risk to the organization is being managed. Ensure timely remediation of issues.
• Effectively perform deficiency evaluation, understanding mitigating controls to determine risk aggregation.
• Perform controls testing and monitoring on a regular basis. Manage control testing scope.
• Record and report the current state of SOX and SOC risk.

• 4+ years of experience within technology risk, control and governance, Internal Audit or SOX disciplines with increasing responsibility and work complexity.
• Industry certifications preferred.
• Public Accounting experience preferred.
• Bachelor’s degree or equivalent combination of education and related experience.

• Strong expertise in SOX, including 4+ years working on SOX related projects.
• Understanding of IT Audit principles and control frameworks (COBIT, NIST).
• Ability to oversee multiple processes, action plans and key stakeholders simultaneously.
• Experience raising awareness of issues to key stakeholders across technology.
• Ability to facilitate and drive management support throughout the external audit life cycle.
• Experience designing, maintaining, and managing a controls library.

• Drives for results — shows urgency and takes initiative,…