VP, IS Risk - Assurance

Our client operates in the consumer financial services space, focusing on making everyday purchases and essential needs more accessible through flexible financing solutions. They support individuals across their financial journey—from obtaining their first line of credit to managing long-term financial flexibility—by enabling more informed and responsible credit decisions.

Our client has built a vast network that connects consumers with a wide range of small and mid-sized businesses, as well as providers in the health and wellness sector. Through this ecosystem, they play a meaningful role in supporting both customer financial well-being and the growth of businesses that form a critical part of the broader economy

Responsibilities:

• Oversee and execute end to end control assurance activities for all sub functions within Information Security
• Formalize, Pilot and execute first line of defence (1LOD) assessments for Information Security to proactively identify risks to the business
• Lead the client assessments program by liaising with internal client partners to ensure is meeting client expectations for Information Security Assessments and Audits
• Collaborate with Sourcing and Legal teams to review third-party supplier contracts, ensuring contractual terms align with the defined scope of services and comply with applicable regulatory requirements and governance frameworks
• Support execution of FedLine and other assessments by working with internal SMEs, Second and Third Line of defense teams
• Support renewal of Cyber Insurance for the organization by working with insurance brokers and key internal stakeholders
• Develop Financial Security Assurance specific security standards and procedures
• Perform other duties and/or special projects as assigned.

Requirements:

• Bachelor’s degree in Computer Engineering or related field, with a minimum of 10+ years of experience in Information Security OR in lieu of the Bachelor's degree, a minimum of 12+ years of experience in Information Security.
• 8+ years of progressive experience in information security, technology risk, security controls assurance, or audit, including 5+ years leading teams.
• Good understanding of IS Risk Management Concepts
• Strong working knowledge of IT related US Banking regulations & industry best practices (NIST, PCI DSS, HIPAA, CRI etc.)
• Demonstrated experience designing and executing control testing/assurance programs across multiple security domains
• Exposure to working with external attack surface monitoring tools to partner with internal stakeholders to remediate external risk exposure to the organization
• Proven ability to influence and partner across Information Security, Technology, Risk, Compliance, and Audit functions
• Excellent executive communication skills—able to synthesize complex findings into clear, actionable insights.
• Excellent interpersonal skills with ability to influence team members, management & external groups
• Self-motivated & able to work independently or in a team environment & work with virtual teams