VP, IT Governance Risk and Compliance

VP, IT Governance Risk and Compliance

We are searching for an experienced VP, IT Governance Risk and Compliance at our Connecticut office.

Full-Time

Norwalk,CT

Wilton Re is an industry leader in the life (re) insurance space, specializing in the acquisition of in force life insurance and annuities. We are experienced industry specialists focused on the risk, capital, and operational needs of our clients’ businesses. We provide our clients with the services they need from inforce transactions and product development to underwriting and new business strategies.

Wilton Re has the resources and expertise to pursue and successfully manage the largest life and annuity transactions in the company.

The Vice President, IT Governance, Risk & Compliance is accountable for the governance, oversight, monitoring, reporting, and continuous improvement of Wilton Re’s IT control environment. The role centralizes IT governance,regulatory compliance readiness, audit management, control monitoring, policy governance, and control effectiveness reporting under one senior leader.

The VPensures IT controls are clearly defined, assigned, monitored, tested,evidenced, remediated, and reported in alignment with regulatory requirements,industry frameworks, and business objectives. Maintains a unified IT control framework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500,IT General Controls, ICFR requirements, SOC reporting expectations,and relevant third-party assurance standards.

This leader partners closely with IT, Legal, Compliance, Finance, Risk Management,Internal Audit, business leaders, auditors, regulators, and third-party service providers. The role provides periodic reporting to executive leadership,governance committees, Audit Committee, and Board stakeholders regarding control effectiveness, risk posture, remediation status, and compliance readiness.

• Own Wilton Re’s IT control frameworkacross operational, regulatory, cybersecurity, and financial reporting control domains.
• Establish control ownership,accountability, evidence requirements, monitoring cadence, issue management, and reporting structures across IT.
• Coordinate across first-line control owners, second-line risk and compliance functions, and Internal Audit to maintain clear accountability and effective governance.

• Maintain readiness for regulatory examinations, audits, and compliance reviews, including NYDFScybersecurity requirements and relevant insurance or financial services obligations.
• Coordinate responses to auditors,regulators, and examiners, ensuring responses are complete, timely,consistent, and supported by appropriate evidence.
• Manage audit findings, corrective actions, control deficiencies, certifications, attestations, management representations, and remediation activities through closure.

• Establish control monitoring and testing programs, including scope, frequency, performers, reviewers,evidence, exceptions, and remediation status.
• Develop dashboards, metrics, and reporting for executive leadership, governance committees, Audit Committee, and Board stakeholders.
• Establish standards for audit evidence management, retention, traceability, accessibility, and quality review.

• Manage the lifecycle of IT policies,standards, and procedures, including creation, review, approval,publication, evidence, and retirement.
• Ensure policies are maintained in accordance with governance requirements and material change expectations.
• Monitor policy compliance and translate regulatory change and audit expectations into practical ITpolicy, standard, and procedure…