Engineering Division-New York-Vice President, Risk Governance-10424173

About the role

Lead the transformation and optimization of the overall Technology Risk function to drive increased effectiveness and efficiency of the information security and cyber security program. Partner with Technology Risk and Engineering leadership to align transformation activities with divisional strategic objectives and regulatory drivers.

Responsibilities

• Perform Application Security Assessments including Code Review, Penetration Testing, Design Review, and Threat Modelling, and communicate results to application engineers.
• Review application security architecture, policies, standards definitions, and document findings.
• Identify vulnerabilities in software applications and design processes to reduce security risks.
• Research new cloud services and identify secure ways for the Firm to leverage Cloud technologies.
• Work with stakeholders to analyze the design architecture of software components and assess security threats and risks.
• Share issues and recommendations with component owners and advise on secure remediation implementation.
• Enable a world-class cyber defense program by collaborating with technical, incident management, and forensic personnel to understand cyber threat actor activity.
• Provide security consulting within the Firm as needed.

Requirements

• Master’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Cyber Security Engineering or a related field and three (3) years of experience in the job offered or a related role
• OR Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Computer Engineering, Cyber Security Engineering or a related field and five (5) years of experience in the job offered or a related role

Prior experience must include:

• Three (3) years (with a Master’s degree) OR five (5) years (with a Bachelor’s degree) with technical Project Management or Program Management function within the financial services or technology industry
• Target Operating Model (TOM), control framework, process engineering, automation and location strategy
• Software engineering fundamentals, identifying risks, assessing mitigating controls, and making recommendations on improving the control environment
• Working within an engineering or cybersecurity environment
• Risk, compliance, regulatory, or information technology/security experience
• Risk management methodologies and frameworks
• Data analysis and visualization experience including Microsoft Excel

Pay

Annual base salary for this New York, New York based position is $176,000 - $264,000.