Vice President - Cyber Risk & Assurance
Job Description
[Up to c. $170k Base Salary + Discretionary Bonus | Hybrid Working - 50% On-site]
Role Overview
We’re representing a major financial-services organisation strengthening its Cyber Security Risk & Assurance function in New York. The team operates across cyber governance, audit management, risk assessments and remediation oversight, working closely with security engineering and technology stakeholders across a highly regulated environment.
This hire will join as a senior individual contributor, taking ownership of the coordination and quality of cyber assurance activity rather than managing a team. Analysts will support evidence gathering, assessment activity and reporting, with the VP expected to challenge outputs, identify the material risk story and turn technical findings into clear management-level reporting. The role requires someone who can operate comfortably between technical security teams, auditors, risk stakeholders and senior management. Strong cyber risk experience is important, but so is sufficient technical depth to understand how security controls operate in practice and challenge the evidence behind them...
Role Snapshot
- Own and coordinate cyber audits, security assessments and assurance reviews from initial scoping and evidence collection through findings, remediation and closure
- Bring approximately 5-8 years of relevant experience across cyber risk, information security, technology risk, cyber GRC, IT risk, IT audit or closely related assurance disciplines
- Apply credible technical understanding across areas such as security engineering, network security, vulnerability management and cyber controls when reviewing evidence and challenging stakeholders
- Assess control design and operating effectiveness, documenting observations and helping distinguish genuine security exposure from procedural or documentation weaknesses
- Work directly with security, engineering, technology, audit and risk teams to manage requests, walkthroughs, evidence quality, deadlines and outstanding actions
- Translate detailed analyst outputs and technical findings into concise risk summaries, governance materials, dashboards and management reporting
- Maintain clear oversight of audit findings, assessment actions and remediation commitments, ensuring ownership, evidence and closure status remain transparent
- Demonstrate strong written and verbal communication, including the judgement to explain technical cyber risks clearly to non-technical and senior stakeholders
- (Preferred) Bring experience from cyber security, technology risk or assurance consulting, particularly where you have advised multiple technical teams or organisations
- (Preferred) Experience within regulated financial services is valuable, but candidates from other complex and highly controlled environments will be considered
...
Apply for this role
All fields marked with * are required.