Vice President - Information Technology and Cyber Risk Management

Crédit Agricole SA; America (IN); Hybrid; USD 150,000 - 185,000; Full time

Job summary

Crédit Agricole CIB in the United States seeks a Vice President for Information Technology and Cyber Risk Management. This 2nd Line role oversees ICT risk across CUSO, ensuring regulatory compliance, risk monitoring and reporting, with a hybrid schedule based in Iselin, NJ or NYC and travel to NYC as needed.

The candidate will assess ICT risk, coordinate with risk committees, and lead regulatory responses. Requires CRISC or equivalent, CISSP/CISM/CISA/CBCP, and 5+ years in risk management.

Qualifications

• 5+ years of oversight experience in Operational Risk, IT, Cybersecurity or Operational Resilience within a 2nd Line of Defence.
• 8–15 years in risk-related functions (GRC, internal audit, or governance).
• Experience with US regulatory requirements and familiarity with FFIEC, NIST, ISO27001, COBIT is a plus.
• US banking experience preferred; ability to communicate complex tech concepts to Sr. Management.

Responsibilities

• Oversee First Line of Defence ICT risk framework implementation and effective challenge.
• Monitor ICT risk KPIs/KCIs; escalate breaches to risk committees.
• Support regulatory exams; prepare materials and present monitoring sessions to regulators.
• Produce consolidated quarterly ICT risk reports for committees.
• Manage issues through the issue lifecycle; drive remediation actions.

Skills

Regulatory experience

Analytical skills

Communication skills

Leadership ability

Risk Management knowledge

Audit/Testing knowledge

Collaborative working

Ability to manage up

Understanding of technology landscapes

Team orientation

Education

Bachelor's degree / BA or BS

MIS / IT / Cybersecurity background (desirable)

Job description

Vice President - Information Technology and Cyber Risk Management

Business type

Types of Jobs - Risk Management / Control

Job title

Vice President - Information Technology and Cyber Risk Management

Contract type

Permanent Contract

Job summary

Summary

The Vice President, Information Technology and Cyber Risk Management (ITCRM) position is an individual contributor role within Credit Agricole’s Risk Division with 2nd Line of Defence oversight responsibilities across all business lines and activities of Credit Agricole’s Combined U.S. Operations (CUSO) for Information and Communications Technology (ICT) Risk, which includes IT Risk, Cyber Risk, and Operational Resiliency Risk.

The Position can be based out of Iselin, New Jersey or New York City on a hybrid work schedule with requirements to travel to NYC as needed for essential meetings (regulatory, team meetings, collaboration, etc.)

Reporting to the Head of IT and Cyber Risk for CUSO, you will be responsible for assessing, monitoring, and testing 1st Line of Defence to ensure ICT risk is appropriately identified, measured, managed, and reported in accordance to US Regulatory requirements and frameworks.

Responsibilities

• Oversee and provide effective challenge of First Line of Defence implementation of enterprise and operational risk management frameworks for ICT Risks.
• Monitor Key Risk, Key Performance, and Key Control Indicators for Information and Communications Technology across all business units, aggregate reporting to Risk Committees and elevate any breaches of established tolerances and thresholds.
• Support regulatory exams by preparing materials, responding to regulatory inquiries, and presenting on continuous monitoring sessions to regulators.
• Perform analysis on quarterly reports from various US operations and create a consolidated quarterly risk reports to be presented at various risk committees on ICT Risk.
• Manage issues across the issue management lifecycle
• Monitor regulatory rule changes and conduct training and awareness sessions as needed to business leaders across the 1st line.
• Collaborate with other Risk Management functions to identify top and emerging risks to ensure appropriate visibility of the evolving landscape within Information and Communications Technology.

Salary Range: $150k-$185k

#LI-DNI

Supplementary Information

Special Role Requirements:

• Candidate must have obtained a Certification in Risk and Information Systems Control (CRISC) Additional certifications in CISA, CISM, CBCP, and/or CISSP are a plus.
• Familiarity with the Federal Financial Institutions Examination Council (FFIEC) booklets with the ability to assess against them. Additional knowledge of NIST 800-53, NIST CSF, CRI, ISO27001, COBIT, and/or CIS frameworks are a plus.
• Must possess the ability to communicate well; translating technology terminology and issues to non-technical audiences within Sr. Management.

Geographical area

America, United States Of America

City

Bachelor Degree / BSc Degree or equivalent

Education Essential: College Degree BA/BS

Education Desirable: College Degree BA/BS inManagement Information Systems (MIS), Information Technology, or Cybersecurity

Level of minimal experience

6-10 years

Experience

Experience Essential:

• 5+ years of experience with oversight responsibilities in Operational Risk, Information Technology, Cybersecurity and/or Operational Resilience within a 2nd Line of Defence function such as Risk Management or Compliance.
• OR
• 8-15 years of experience in risk related functions such as 1st line Governance Risk, and Compliance (GRC) or 3rd Line Internal Audit functions focused on Information Technology, Cyber Security, and/or Operational Resilience.
• Prior experience in a US Large or Foreign Banking Organisation (LFBO)
• Experience in evaluating and implementing US regulatory requirements.
• Experience with or at a state or federal agency.

Required skills

• Regulatory experience
• Detailed Oriented, articulate and possessing good communication skills
• Excellent Analytical Skills
• Resourceful in identifying, following up and resolving issues.
• Strong team spirit and work ethic
• Strong written and verbal communication skills
• Ability to collaborate across the organization and manages relationships
• Leadership ability, able to drive action within the organization.
• Ability to manage up
• Ability to manage horizontally across multiple businesses and risk disciplines.
• Strong Risk Management knowledge is required including working knowledge of Enterprise Risk Management, Operational Risk Management, and familiarity with Third Party Risk Management.
• Knowledge of technology environments and processes is also required.
• Audit/Testing knowledge

Technical skills required

Specialist Training Required:

• Certified in Risk and Information Systems Control (CRISC)
• CISSP, CISM, CISA, CBCP

General information

Entity

About Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB)

Crédit Agricole CIB is the corporate and investment bank of the Crédit Agricole group, the 10th largest banking group in the world *.

We support major companies and financial institutions in their development and the financing of their projects.

As pioneers in responsible finance, social and environmental commitments are at the heart of our activities.

Joining our teams means working in a multicultural environment, both dynamic and stimulating, where you will contribute to developing a sustainable economy.

We support employees throughout their journey: you will develop your skills and access various mobility opportunities among the diversity of our businesses in more than 30 international locations.

Our culture is built on collaboration, innovation and openness, where everyone is valued and empowered.

By working every day in the interest of society, Crédit Agricole CIB aligns with the Group values committed to diversity and inclusion and placing people at the heart of all its transformations.

All our jobs are open to people with disabilities. We welcome applications from candidates of all backgrounds and experiences.

Ready to take part in our mission ?

*By balance sheet size - The Banker, Juillet 2025