Cyber Security Architect with Banking Domain Experience

About the Role:

Client is a large financial services organization. This role runs the operational side of its supplier cybersecurity risk program. That covers managing audit findings and maintaining the security requirements and assessment questions suppliers are evaluated against.

What You Will Do:

• Manage audit and regulatory findings and their remediation plans
• Support internal audit and regulatory examiners
• Maintain the security requirements suppliers must meet and the assessment questions used to test them
• Keep requirements and questions aligned to security standards and industry frameworks such as NIST

Required Experience:

• 8+ years in cyber risk or GRC, including 4+ years in third party risk
• Ownership of audit and regulatory findings and remediation plans
• Supporting internal audit and examiner requests
• Maintaining supplier security requirements and assessment question sets mapped to NIST CSF, NIST 800-53, and ISO 27001
• Strong leadership and influence skills

Nice to Have:

• Bank regulator exam experience with the OCC, FRB, or FFIEC
• Familiarity with FS-ISAC and Shared Assessments (SIG)
• Program or operating model design

Preferred Certifications (any one):: CTPRP, CISA, CISSP, CISM, or CRISC

Background We re Looking For:

• Regulated bank experience is highly valued
• Strongly preferred: experience inside a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager)
• Big 4 or managed security provider consulting experience is welcome if the candidate was embedded with an enterprise team