Who we are looking for

We are looking for a highly skilled and experienced Cyber Audit, Vice President to join our Cybersecurity Audit Team. To succeed in this role, you need to have a deep understanding of cyber risks processes, controls, industry standards, and should have a strong knowledge of NIST, MITRE, and Defense in Depth concepts. You will be responsible for working closely with peers for infrastructure, security, and application audit while overseeing and developing a diverse global team. Collaboration with the banks' cyber leadership is essential. In this role you will join a growing team that is focused on building leading practices, and you will have a functional reporting line to the Head of Cybersecurity Audit. The role is based in our Boston, MA, USA or Toronto, Canada office.

• Lead and participate in cyber audits and cyber focused validation activities.
• Build out continuous auditing processes including the use of data analytics.
• Collaborate closely with global peers for infrastructure, security, and application and business audit.
• Stay updated on cyber risk, changes in the regulatory environment pertaining cyber, and innovative assurance approaches.
• Develop and maintain relationships with key stakeholders across the organization, including the banks' cyber leadership team.
• Manage and develop a diverse global team of auditors to provide expert advice on cyber risks and threats.
• Ensure the cyber audit function is integrated with the overall audit program.
• Communicate audit findings and recommendations effectively to the banks' cyber leadership team.
• Monitor, track progress and challenge the sufficiency of audit and regulatory remediation activities.
• Prepare audit reports and presentation materials for internal and external stakeholders.
• Provide thought leadership on emerging cyber risks and threats.
• Have a deep understanding of cyber risk management, including qualitative and quantitative assessments.
• Serve as a subject matter expert in cyber risk frameworks, including CMMI, and apply them effectively in audits work.
• Participate in meetings with key regulators and communicate audit strategy and results effectively.
• Participate as a non-voting member of various steering committees, management working groups, promoting balanced discussions, and encouraging challenge and debate.

• Role model behavior in cross-cultural awareness and ability to connect with colleagues globally in establishing and maintaining a collaborative and inclusive work environment.
• Strong leadership, with confidence to gain trust and credibility, and an ability to develop a high performing team by promoting collaboration and innovation at all levels.
• Proven impact through the life cycle from strategic thinking through implementation and measuring success.
• Expertise in developing and maintaining relationships with multiple stakeholders, including executives, senior management and team members to drive progress.
• Strong communication, interpersonal, and leadership ability across all levels coupled with effective problem solving, conceptual thinking, quantitative and analytical skills.
• Strong written and verbal communication, presentation, and technical writing skills.
• Advanced project management skills.
• Fluency in English - written and spoken.

• Bachelor's degree in Information Technology, Computer Science or a related field; Master's degree preferred.
• Minimum of 12 years of experience in information security or cyber risk management, with at least 7 years of experience in audit or assurance lead roles.
• Successful experience working in the banking or financial services industry or other regulated industries, with a strong understanding of various global regulatory environments.
• Expertise in cyber risk management, including the latest trends, tools and techniques.
• Expertise in evaluating cyber security, cyber resiliency and cyber maturity and the ability to develop and implement effective audit coverage strategies.
• Regulatory expertise, with a strong understanding of compliance requirements for the banking industry and direct exposure to global regulators in leading, active roles.
• Strong knowledge of Cyber and Cloud technologies and tools and the ability to assess associated risks, including data driven monitoring or penetration test approaches.
• Relevant certifications, such as CISSP, CISA, or CISM are highly preferred.

• Willingness to travel internationally as required.