Cyber Audit, Vice President
State Street - Boston, MA
posted 4 days ago
About the position
We are looking for a highly skilled and experienced Cyber Audit, Vice President to join our Cybersecurity Audit Team. To succeed in this role, you need to have a deep understanding of cyber risks processes, controls, industry standards, and should have a strong knowledge of NIST, MITRE, and Defense in Depth concepts. You will be responsible for working closely with peers for infrastructure, security, and application audit while overseeing and developing a diverse global team. Collaboration with the banks' cyber leadership is essential. In this role you will join a growing team that is focused on building leading practices, and you will have a functional reporting line to the Head of Cybersecurity Audit. The role is based in our Boston, MA, USA or Toronto, Canada office.
Responsibilities
- Lead and participate in cyber audits and cyber focused validation activities.
- Build out continuous auditing processes including the use of data analytics.
- Collaborate closely with global peers for infrastructure, security, and application and business audit.
- Stay updated on cyber risk, changes in the regulatory environment pertaining cyber, and innovative assurance approaches.
- Develop and maintain relationships with key stakeholders across the organization, including the banks' cyber leadership team.
- Manage and develop a diverse global team of auditors to provide expert advice on cyber risks and threats.
- Ensure the cyber audit function is integrated with the overall audit program.
- Communicate audit findings and recommendations effectively to the banks' cyber leadership team.
- Monitor, track progress and challenge the sufficiency of audit and regulatory remediation activities.
- Prepare audit reports and presentation materials for internal and external stakeholders.
- Provide thought leadership on emerging cyber risks and threats.
- Have a deep understanding of cyber risk management, including qualitative and quantitative assessments.
- Serve as a subject matter expert in cyber risk frameworks, including CMMI, and apply them effectively in audits work.
- Participate in meetings with key regulators and communicate audit strategy and results effectively.
- Participate as a non-voting member of various steering committees, management working groups, promoting balanced discussions, and encouraging challenge and debate.
Requirements
- Bachelor's degree in Information Technology, Computer Science or a related field; Master's degree preferred.
- Minimum of 12 years of experience in information security or cyber risk management, with at least 7 years of experience in audit or assurance lead roles.
- Successful experience working in the banking or financial services industry or other regulated industries, with a strong understanding of various global regulatory environments.
- Expertise in cyber risk management, including the latest trends, tools and techniques.
- Expertise in evaluating cyber security, cyber resiliency and cyber maturity and the ability to develop and implement effective audit coverage strategies.
- Regulatory expertise, with a strong understanding of compliance requirements for the banking industry and direct exposure to global regulators in leading, active roles.
- Strong knowledge of Cyber and Cloud technologies and tools and the ability to assess associated risks, including data driven monitoring or penetration test approaches.
- Relevant certifications, such as CISSP, CISA, or CISM are highly preferred.
Nice-to-haves
- Willingness to travel internationally as required.
Benefits
- Generous medical care, insurance and savings plans.
- Flexible Work Programs to help match your needs.
- Development programs and educational support to help you reach your full potential.
- Paid volunteer days and matching gift programs.
- Access to employee networks that help you stay connected to what matters to you.
