Senior Tech & Information Security Risk Leader (2LOD)

IDB Bank; New York (NY); Hybrid; USD 160,000 - 180,000; Full time

Job summary

IDB Bank seeks a Vice President for Second Line of Defense to independently oversee technology and information security risk. The role monitors risk programs, leads assessments, and ensures governance with regulatory and board-facing reporting.

Strong collaboration with IT, Compliance, Audit, and Risk is essential for effective risk management. Qualifications include 10+ years in risk or cyber domains, with CISSP/CISM or similar preferred.

Qualifications

• 10+ years in technology infrastructure, information security, cyber risk, or risk oversight.
• Strong knowledge of cloud, applications, infrastructure, access management, resilience, and risk guidance.
• Experience connecting technology risk to ERM processes and ICAAP.
• Ability to lead risk assessments, control reviews, and remediation tracking.
• Experience using GRC tools and managing cross-functional risk programs.

Responsibilities

• Provide independent Second Line oversight of tech, security, and cyber risk programs.
• Lead risk assessments, control reviews, and remediation tracking.
• Develop KRIs/KPIs and reporting for management, audit, and regulatory discussions.
• Coordinate with audit, regulators, and internal teams while maintaining independence.
• Produce clear, defensible work linking risks, controls, and conclusions.

Skills

Technology risk oversight

Cyber risk knowledge

Risk assessment & governance

ERP/IRM/ERM integration

GRC tools experience

Executive communication

Independent challenge

Education

Bachelor’s degree in technical or risk discipline

Tools

GRC tools

Job description

IDB Bank seeks a Vice President for Second Line of Defense to independently oversee technology and information security risk. The role monitors risk programs, leads assessments, and ensures governance with regulatory and board-facing reporting.

Strong collaboration with IT, Compliance, Audit, and Risk is essential for effective risk management. Qualifications include 10+ years in risk or cyber domains, with CISSP/CISM or similar preferred.