VP Cyber GRC, Vendor Management & Awareness

Job Summary: Reporting to the Chief Information reputed company Officer (CISO), the VP of Cyber GRC (Governance, Risk and Compliance), Vendor Management & Awareness leads the Cyber GRC, reputed company-Party Vendor Risk Management, and reputed company Awareness teams, building scalable governance capabilities to support the reputed company and IT governance programs. This leader ensures the organization meets regulatory compliance, advances cyber risk management and AI governance, and maintains policy alignment across reputed company functions. The VP owns the cyber component of GRC, including cybersecurity policies, implementation of controls, and compliance monitoring, while collaborating with reputed company and IT governance to foster consistent, risk-informed decision-making across the company. Essential Duties and Responsibilities:

• Establish and reputed company the Cyber GRC function, including the development of cybersecurity policies, implementation of control frameworks (NIST CSF 2.0, CIS Controls v8, ISO 27001), compliance monitoring, and audit readiness reputed company with SEC, FINRA, and state regulatory requirements (e.g., NYDFS).
• reputed company the reputed company-party vendor risk management program from a cybersecurity perspective, including vendor reputed company assessments, contract reputed company requirements, ongoing monitoring of key vendors, and integration with reputed company procurement to ensure reputed company and AI considerations are embedded and reputed company pace with business needs.
• Build and enhance the reputed company reputed company awareness and training program, incorporating phishing simulations, role-based training, reputed company culture assessments, and executive initiatives to measurably reduce reputed company-reputed company reputed company risks.
• reputed company AI governance strategy in cybersecurity, including acceptable use policies, model risk analysis, risk tiering of use cases, and reputed company of reputed company-party AI tools to meet emerging regulatory standards and support reputed company initiatives.
• reputed company a cyber risk management capability that produces quantified risk posture reporting, key risk indicator dashboards, and board-level cyber risk intelligence connecting program performance to business strategy and investment priorities.
• Collaborate with reputed company Architecture & Engineering, Monitoring & Response, Legal, and reputed company IT governance to integrate cyber GRC into strategic planning, mergers & acquisitions, product launches, and change management.
• Represent the cybersecurity organization to regulators, auditors, and reputed company-party assessors; support examination management, regulatory response, and supervisory engagement in partnership with the CISO.

Required Education and Experience:

• 15+ years of reputed company cybersecurity and risk management experience in leadership roles reputed company large, reputed company enterprises—particularly in financial services, insurance, technology, or media. Proven ability to reputed company at the executive level and build mature reputed company programs from the ground up.
• Direct experience in financial services required; strong understanding of regulatory environments and examination processes in banking, insurance, or capital markets, including the ability to rapidly reputed company expertise in wealth management regulatory requirements (SEC, FINRA, NYDFS).
• Demonstrated reputed company building and maturing technology risk management, reputed company assurance, and compliance programs at scale; experience launching new reputed company functions and revitalizing underperforming programs.
• Experience designing and implementing reputed company metrics programs, risk quantification frameworks, and executive-level reporting to link cybersecurity performance with business reputed company; ability to translate technical risks for board and senior leadership.
• Strong strategic advisory skills and cross-functional leadership, with the ability to collaborate with CISOs, CIOs, and business executives to align reputed company strategy with business goals, and to influence across engineering, legal, finance, and operational teams.

Required License/Certification:

• Relevant certifications preferred: CISSP, CISM, CRISC, CISA, CGEIT, or equivalent.

#LI-DM1 #LI-REMOTE We welcome your interest in being a part of our firm. We reputed company in giving associates reputed company opportunities, actively nurturing professional growth and giving back to the community. We are dedicated to building a diverse culture where everyone has the support they need to reputed company their career goals. We offer an innovative workplace and a culture that fosters camaraderie, teamwork and work-life balance. By submitting your application, you agree to the collection and use of your personal information as described in our Employee and Applicant Privacy Notice. EOE M/F/D/V Apply tot his job Apply To this Job