Head of IT Risk & Cyber Controls Testing

JCW Group · Charlotte, North Carolina

FULL TIME

Job Description

Executive Director, Head of IT Risk & Cyber Controls Testing

The company

Our client is one of the world’s largest global banking groups, with trillions in assets and a fast-growing US franchise. It is investing heavily in its Americas control infrastructure, building out modern risk and control capabilities rather than maintaining legacy ones. You get the stability of a tier-one bank with the pace of a business still in build mode.

The role

You’ll lead the cyber, data and technology controls testing programme for the Americas, a first-line function with visibility right up to senior management. It’s a genuine build opportunity. You’ll shape the testing methodology, set up new monitoring routines, and bring in automation and AI to modernise how controls are tested.

What you’ll be doing

Leading risk-based testing across cybersecurity, data management and technology controls

Designing and running control monitoring routines, from walkthroughs and process maps to root cause analysis

Running deep dives to find control weaknesses, then driving remediation with technology owners

Reporting findings and trends to senior stakeholders across the first line, second line and internal audit

Shaping the testing methodology, including the use of AI and automation tools

What you’ll bring

10+ years in IT audit, technology risk or first-line control testing within financial services

Implementation of risk and control frameworks is essential

Hands-on NYDFS 500 experience, implementing, monitoring or certifying compliance

Strong grasp of NIST CSF / 800-53, ISO 27001, FFIEC, CRI Profile or COBIT

A track record of building or leading control testing programmes, not just executing them

Company	JCW Group
Location	Charlotte, North Carolina
Type	FULL TIME
Niche	Full-time

Explore 1M+ Live Opportunities.

Head of IT Risk & Cyber Controls Testing

Job Description

CISA, CISSP, CISM, CRISC or CIA preferred