Lead, IT Risk

📋 Description

• Execute IT Risk Framework: identify, analyze, report risks.
• Conduct annual IT risk assessments (RCSAs, reviews).
• Maintain IT risk register and exposure reporting.
• Partner with IT, Security, BCM to assess IT/cyber controls.
• Liaise between IT Risk, security, and business; raise awareness.
• Prepare risk materials for risk committees and regulators.

🎯 Requirements

• Bachelor’s or advanced degree in Information Security or related field.
• 8+ years in IT internal audit or risk management in regulated industries.
• Proven experience implementing risk frameworks and control testing.
• Familiarity with NYDFS, SOC 2, PCI DSS.
• Strong communication and stakeholder engagement skills.

🎁 Benefits

• Competitive starting pay
• Discretionary annual bonus
• Equity grant for new hires
• Comprehensive health plans
• 401K with company matching
• Paid Parental Leave