Director - Risk Management - Audit

Moody's Corporation; United States; Remote; USD 143,000 - 209,000; Full time

Job summary

An established industry player is seeking a Director of Risk Management to oversee compliance and audit efforts for banking software products. This pivotal role involves leading SOC1/SOC2 and ISO audits, engaging with customers to address vendor risk assessments, and ensuring adherence to regulatory standards. The ideal candidate will possess strong technical expertise in cybersecurity controls and a proven track record in risk management. Join a dynamic team that values innovation and collaboration, where your contributions will directly impact the organization's strategic risk initiatives and customer satisfaction.

Benefits

Medical insurance

Dental insurance

Vision insurance

Parental leave

Paid time off

401(k) plan

Life insurance

Disability insurance

Tuition reimbursement

Employee stock purchase plan

Qualifications

• 6-9 years of experience in IT audit or risk management.
• Strong knowledge of IT controls and compliance frameworks.

Responsibilities

• Lead SOC1/SOC2 and ISO audits, ensuring compliance and documentation.
• Act as a trusted advisor for customer inquiries and risk assessments.

Skills

IT and cybersecurity controls

SOC1/SOC2 audits

ISO 27001 compliance

Risk management

Analytical skills

Communication skills

Project management

Education

Bachelor's degree in related field

Professional certifications (CISA, CISSP, etc.)

Tools

Governance, Risk, and Compliance (GRC) platforms

Cloud environments (AWS, GCP, Azure)

Job description

Join to apply for the Director - Risk Management - Audit role at Moody's Corporation

Join to apply for the Director - Risk Management - Audit role at Moody's Corporation

• 1414 S Tryon Street, 7th Floor, The Railyard Floors 5-8, Charlotte, North Carolina, 28203, US
• Remote - United States, US
  
  

Location(s):

• 1414 S Tryon Street, 7th Floor, The Railyard Floors 5-8, Charlotte, North Carolina, 28203, US
• Remote - United States, US
  
  

Line Of Business: Banking(BANKING)

Job Category:

• Product Development
  
  

Experience Level: Experienced Hire

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

Job Description

The Moody’s Analytics (MA) Banking Risk Management team oversees the Banking segment’s risk management framework to safeguard sensitive business data, ensure regulatory compliance, protect against security threats, and meet customer requirements for controls assurance. As a trusted partner to both internal stakeholders and external customers, the team collaborates with Corporate Risk Management and Moody’s Shared Services to reduce risk while enabling business priorities.

Role Overview

The Director - Banking Risk Management will lead risk management and compliance efforts for Moody’s Analytics Banking software products and services, focusing on SOC1/SOC2 and ISO audits, customer audits, and risk remediation activities. This role will also serve as a key liaison for customer inquiries regarding technology and cyber due diligence assessments, while driving strategic risk awareness across the organization.

Key Responsibilities

Audit Management:

• Lead the preparation, coordination, and execution of SOC1/SOC2 and ISO audits, including gathering relevant documentation, conducting internal assessments, and liaising with external auditors.
• Ensure compliance with ISO standards (e.g., ISO 27001) by maintaining and enhancing policies, procedures, and controls.
• Support customer audits by providing necessary documentation, responding to inquiries, and ensuring alignment with customer-specific requirements.
  
  

Customer Engagement:

• Act as a trusted advisor to customers, addressing vendor risk assessments and technology due diligence inquiries.
• Collaborate with sales and legal teams to support RFP submissions, contract negotiations, and customer risk reviews, ensuring accurate and timely responses on information security controls.
• Engage with teams across Moody’s in sales, product management, development, and operations to provide customers with the information needed to complete their reviews.
  
  

Risk Monitoring and Remediation:

• Track and oversee risk remediation activities, ensuring timely and effective resolution of identified risks.
• Monitor compliance with policies, procedures, and regulatory requirements while identifying areas for improvement and automation.
• Contribute to Moody’s third-party risk management framework and support its implementation within the Banking segment.
  
  

Documentation and Reporting:

• Maintain accurate and up-to-date records of audit activities, findings, and remediation efforts.
• Create customer-facing documentation and reports on Moody’s software products’ information security controls.
  
  

Qualifications:

Technical Expertise:

• Strong knowledge of IT and cybersecurity controls, frameworks, and standards, including SOC1, SOC2, NIST, ISO 27001, COBIT, and C5.
• Familiarity with software development practices, enterprise technology operations, and public cloud environments (e.g., AWS, GCP, Azure).
• Experience conducting audits such as SOC1/SOC2, ISO audits, and customer audits.
  
  

Experience:

• 6 to 9 years of experience in IT audit, enterprise risk management, information security, or vendor risk management.
• Proven track record of managing compliance programs and risk remediation activities.
• Proven experience mentoring, coaching, or managing junior staff, with the ability to inspire and develop talent within a high-performing team.
  
  

Skills:

• Excellent verbal and written communication skills, with the ability to handle negotiations and complex conversations with clients and auditors.
• Strong analytical, problem-solving, collaboration, and project management skills.
• Highly organized, detail-oriented, and capable of prioritizing and meeting deadlines in a dynamic environment.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms.
  
  

Certifications:

• Professional certifications such as CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), or PMP (Project Management Professional), or equivalent experience.
  
  

For US-based roles only: the anticipated hiring base salary range for this position is $143,800.00 - $208,600.00, depending on factors such as experience, education, level, skills, and location. This range is based on a full-time position. In addition to base salary, this role is eligible for incentive compensation. Moody’s also offers a competitive benefits package, including not but limited to medical, dental, vision, parental leave, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, a discounted employee stock purchase plan, and tuition reimbursement.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, gender, age, religion or creed, national origin, ancestry, citizenship, marital or familial status, sexual orientation, gender identity, gender expression, genetic information, physical or mental disability, military or veteran status, or any other characteristic protected by law. Moody’s also provides reasonable accommodation to qualified individuals with disabilities or based on a sincerely held religious belief in accordance with applicable laws. If you need to inquire about a reasonable accommodation, or need assistance with completing the application process, please email [e-mail]. This contact information is for accommodation requests only, and cannot be used to inquire about the status of applications.

For San Francisco positions, qualified applicants with criminal histories will be considered for employment consistent with the requirements of the San Francisco Fair Chance Ordinance.

This position may be considered a promotional opportunity, pursuant to the Colorado Equal Pay for Equal Work Act.

Click here to view our full EEO policy statement. Click here for more information on your EEO rights under the law. Click here to view our Pay Transparency Nondiscrimination statement. Click here to view our Notice to New York City Applicants.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.

For more information on the Securities Trading Program, please refer to the STP Quick Reference guide on ComplianceNet

Please note: STP categories are assigned by the hiring teams and are subject to change over the course of an employee’s tenure with Moody’s.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Finance and Sales

Referrals increase your chances of interviewing at Moody's Corporation by 2x

Sign in to set job alerts for “Director of Risk Management” roles.

Director of Governance, Risk, and Compliance

United States $90,000.00-$160,000.00 2 weeks ago

Director of Financial Crimes Compliance – AML/BSA Officer

Credit, Liquidity, and Model Risk Management Director

Founding CRO / Head of Risk & Compliance (LATAM)

Director, Insurance and Risk Management (Remote)

Director of Treasury | Banking | Financial Services

United States $175,000.00-$255,000.00 3 weeks ago

Director, Global Card & Fraud Operations

Director, Strategic Financial Operations

Director, Quality & Risk Adjustment (New York)

United States $165,000.00-$195,000.00 1 month ago

Chief Underwriter and Operations Director

Director of Cybersecurity Risk Management - University Information Services - Georgetown University

Sr. Managing Director, Business Strategy & Operations - Hybrid

United States $350,000.00-$400,000.00 6 days ago

Greater Philadelphia $100,000.00-$160,000.00 2 days ago

Director of Claim Operations Performance - Remote

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.