Senior Tech & Info Security Risk — 2nd Line Oversight

IDB Bank; New York (NY); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Hybrid schedule

Job summary

IDB Bank is seeking a Vice President for Second Line of Defense to provide independent oversight of our technology, information security, and cyber risk programs. You will review risks, controls, and remediation with senior stakeholders, connecting IT risk themes to the broader ERM framework.

The role requires strong communication and technical judgment, with experience in risk assessments, governance, and emerging technology risks. Hybrid schedule in New York City area is offered.

Qualifications

• 10+ years in technology infrastructure, information security, cyber risk, IT controls, or related oversight functions.
• Strong knowledge of technology, cybersecurity, and control environments, including cloud, applications, infrastructure, access management, resilience, NIST, NYDFS Part 500, FFIEC guidance.

Responsibilities

• Provide independent oversight, ongoing monitoring, and effective challenge of First Line technology infrastructure, information security, and cyber risk programs.
• Lead and review risk assessments, RCSAs, control testing, issues, remediation plans, KRIs/KPIs, policies, procedures, evidence, and supporting analysis.
• Develop and enhance the Second Line framework for technology and information security risk and assess connectivity to operational risk, vendor risk, change management, resilience, data management, and enterprise controls.
• Identify, assess, and report risks related to significant projects, new activities, vendor relationships, control changes, AI, automation, and other emerging technologies.
• Develop KRIs/KPIs, prepare materials for management, committees, audit, board, and regulatory discussions.

Skills

Second Line Oversight

GRC Tools

Risk Communication

Education

Bachelor's degree in a related field

Tools

GRC Tools

Job description

IDB Bank is seeking a Vice President for Second Line of Defense to provide independent oversight of our technology, information security, and cyber risk programs. You will review risks, controls, and remediation with senior stakeholders, connecting IT risk themes to the broader ERM framework.

The role requires strong communication and technical judgment, with experience in risk assessments, governance, and emerging technology risks. Hybrid schedule in New York City area is offered.