Director, Cybersecurity Operational Risk

Citizens Bank; Westwood (MA); On-site; USD 178,000 - 220,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement benefits

Education reimbursement

Flexible work arrangements

Job summary

Citizens Bank seeks a Director of Operational Risk Management Oversight - Cybersecurity Risk to provide independent oversight, review, and challenge of cybersecurity risks and collaborate with stakeholders across the enterprise to ensure risks are well defined and managed.

The role leads a small team, advises risk partners, and interacts with all three lines of defense and regulators. It requires strong leadership, regulatory awareness, and expert cybersecurity knowledge.

Qualifications

• 8 years demonstrated cybersecurity domain expertise.
• 4 years risk management experience in financial services.
• Expert knowledge of cybersecurity risks and controls.
• Experience in an organization with strong regulatory oversight.

Responsibilities

• Lead a team of three for independent oversight, review, and challenge of cyber risk programs.
• Advise first line risk partners on complex issues and drive remediation actions.
• Understand external environment and regulatory priorities affecting risk.
• Participate in cybersecurity incident response and post-incident analysis.
• Lead targeted risk assessments on emerging issues with independent opinion.
• Manage governance, policy, and program assurance across the enterprise.

Skills

Cybersecurity domain expertise

Risk management

Executive relationship building

Leadership and team development

Influencing and conflict resolution

Business writing

MS Office (Word/Excel/PowerPoint/Visio

Education

Bachelor's degree

CISSP

CISM

CISA

CRISC

Tools

MS Visio

PowerPoint

Job description

Citizens Bank seeks a Director of Operational Risk Management Oversight - Cybersecurity Risk to provide independent oversight, review, and challenge of cybersecurity risks and collaborate with stakeholders across the enterprise to ensure risks are well defined and managed.

The role leads a small team, advises risk partners, and interacts with all three lines of defense and regulators. It requires strong leadership, regulatory awareness, and expert cybersecurity knowledge.