Head of IT Risk & Cyber Controls Testing

Executive Director, Head of IT Risk & Cyber Controls Testing

The company

Our client is one of the world’s largest global banking groups, with trillions in assets and a fast-growing US franchise. It is investing heavily in its Americas control infrastructure, building out modern risk and control capabilities rather than maintaining legacy ones. You get the stability of a tier-one bank with the pace of a business still in build mode.

The role

You’ll lead the cyber, data and technology controls testing programme for the Americas, a first-line function with visibility right up to senior management. It’s a genuine build opportunity. You’ll shape the testing methodology, set up new monitoring routines, and bring in automation and AI to modernise how controls are tested.

What you’ll be doing

• Leading risk-based testing across cybersecurity, data management and technology controls


• Designing and running control monitoring routines, from walkthroughs and process maps to root cause analysis


• Running deep dives to find control weaknesses, then driving remediation with technology owners


• Reporting findings and trends to senior stakeholders across the first line, second line and internal audit


• Shaping the testing methodology, including the use of AI and automation tools

What you’ll bring

• 10+ years in IT audit, technology risk or first-line control testing within financial services


• Implementation of risk and control frameworks is essential


• Hands-on NYDFS 500 experience, implementing, monitoring or certifying compliance


• Strong grasp of NIST CSF / 800-53, ISO 27001, FFIEC, CRI Profile or COBIT


• A track record of building or leading control testing programmes, not just executing them


• CISA, CISSP, CISM, CRISC or CIA preferred