Assistant Vice President, Technology GRAC

Duties & Responsibilities

• Facilitate regularly scheduled Technology with responsible parties regarding outstanding requests and/or questions.
• Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.
• Request, collect, review, and assess compliance reports from external organizations (i.e. SOC 2 type 2 reports).
• Conduct internal Technology audits (i.e. health checks) and assess the effectiveness of current controls and processes in place.
• Absorb and assist in the development, implementation, and execution of additional internal Technology audit/compliance/risk activities.
• Cook up with team members regarding the remediation status of closing out identified audit gaps.
• Provide support to our offices from both a U.S. and global perspective (i.e. Asia, Europe, etc.) regarding the fulfillment of external audit requests and obligations.
• Analyze global Technology regulatory authorities (i.e., GDPR, APRA, MAS, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.
• Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving Technology regulatory landscape.

Qualifications, Skills And Experience

• 15+ years of experience managing and working in an Technology audit/compliance/risk function with a general understanding (at minimum) in several of the Technology audit/compliance/risk topics listed below: Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.
• Solid background knowledge of US domestic Technology regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.
• Background knowledge of global Technology regulations (i.e., GDPR, MAS, APRA, BAFIN etc.) is preferred, but not required.
• Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.
• Previous experience working with auditing tools and software (i.e. Workiva, AuditBoard, Vanta, Drata, Protect etc.) is a plus.