Technology and Information Security Risk Specialist

A Vice President-grade specialist in IDB Bank's second line of defence who gives independent oversight and challenge to the first-line teams running infrastructure, information security and cyber risk, reporting to the Head of Risk Strategy and Supervisory Oversight. The specialist reviews risk assessments, RCSAs, control testing, issues and remediation plans, builds the second-line framework for technology risk and links it to operational, vendor, resilience and enterprise risk, assesses risks from major projects, AI and automation, and prepares KRIs and materials for committees, the board and regulators.

The bank wants ten or more years in technology, security, cyber risk or IT controls, ideally at a regulated financial institution, solid knowledge of NIST, NYDFS Part 500 and FFIEC, GRC tool experience, and CISSP, CISM, CISA or CRISC. Hybrid schedule in New York.