VP, IT Governance Risk and Compliance

Wilton Re; Norwalk (CT); Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Vacation & holidays

401(k) plan

Profit sharing

Parental leave

Health, vision, dental, life insurance

EAP

Hybrid work environment

Engagement events

Job summary

Wilton Re seeks a seasoned VP, IT Governance, Risk & Compliance to lead governance, risk, and controls for IT in a hybrid Norwalk, CT office. You will oversee regulatory readiness, audit responses, policy governance, and control testing, partnering with Legal, Finance, Internal Audit, and third‑party providers.

The role requires a strong background in ITGC, SOX, and regulatory frameworks, with a track record of executive reporting and risk‑based decision making.

Qualifications

• Minimum 10 years of progressive experience in IT governance, risk management, cyber security, regulatory compliance, audit, controls, or related disciplines.
• Experience in insurance, reinsurance, financial services, or audits/regulators is highly preferred.
• Strong understanding of IT General Controls, ICFR/SOX, SOC reporting, NIST CSF, NYDFS 23 NYCRR Part 500, and third‑party risk management.

Responsibilities

• Own IT control framework across operational, regulatory, cybersecurity, and financial reporting domains.
• Coordinate across IT and risk functions, plus Internal Audit, to maintain accountability and governance.
• Develop dashboards, metrics, and reporting for leadership and board stakeholders.

Skills

IT Governance

Risk management

Cybersecurity

Regulatory compliance

Audit

Stakeholder communication

Board reporting

Education

Bachelor's degree

MBA or advanced degree

Certifications (CISA/CRISC/CGEIT/CISSP/CISM/CIA)

Tools

SOC reporting tools

Dashboard/workflow tools

Control automation software

Job description

We are searching for an experienced VP, IT Governance Risk and Compliance at our Connecticut office.

VP, IT Governance, Risk & Compliance

Full-Time

Norwalk, CT

About The Company

Wilton Re is an industry leader in the life (re)insurance space, specializing in the acquisition of in force life insurance and annuities. We are experienced industry specialists focused on the risk, capital, and operational needs of our clients’ businesses. We provide our clients with the services they need from in force transactions and product development to underwriting and new business strategies.

Wilton Re has the resources and expertise to pursue and successfully manage the largest life and annuity transactions in the company.

Position Summary

The Vice President, IT Governance, Risk & Compliance is accountable for the governance, oversight, monitoring, reporting, and continuous improvement of Wilton Re’s IT control environment. The role centralizes IT governance, regulatory compliance readiness, audit management, control monitoring, policy governance, and control effectiveness reporting under one senior leader.

The VP ensures IT controls are clearly defined, assigned, monitored, tested, evidenced, remediated, and reported in alignment with regulatory requirements, industry frameworks, and business objectives. Maintains a unified IT control framework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, IT General Controls, ICFR requirements, SOC reporting expectations, and relevant third-party assurance standards.

This leader partners closely with IT, Legal, Compliance, Finance, Risk Management, Internal Audit, business leaders, auditors, regulators, and third‑party service providers. The role provides periodic reporting to executive leadership, governance committees, Audit Committee, and Board stakeholders regarding control effectiveness, risk posture, remediation status, and compliance readiness.

Role Responsibilities

Governance, Risk & Controls

• Own Wilton Re’s IT control framework across operational, regulatory, cybersecurity, and financial reporting control domains.
• Establish control ownership, accountability, evidence requirements, monitoring cadence, issue management, and reporting structures across IT.
• Coordinate across first‑line control owners, second‑line risk and compliance functions, and Internal Audit to maintain clear accountability and effective governance.

Regulatory Compliance & IT Audit Response

• Maintain readiness for regulatory examinations, audits, and compliance reviews, including NYDFS cybersecurity requirements and relevant insurance or financial services obligations.
• Coordinate responses to auditors, regulators, and examiners, ensuring responses are complete, timely, consistent, and supported by appropriate evidence.
• Manage audit findings, corrective actions, control deficiencies, certifications, attestations, management representations, and remediation activities through closure.

Control Monitoring, Evidence & Reporting

• Establish control monitoring and testing programs, including scope, frequency, performers, reviewers, evidence, exceptions, and remediation status.
• Develop dashboards, metrics, and reporting for executive leadership, governance committees, Audit Committee, and Board stakeholders.
• Establish standards for audit evidence management, retention, traceability, accessibility, and quality review.

Policy Governance

• Manage the lifecycle of IT policies, standards, and procedures, including creation, review, approval, publication, evidence, and retirement.
• Ensure policies are maintained in accordance with governance requirements and material change expectations.
• Monitor policy compliance and translate regulatory change and audit expectations into practical IT policy, standard, and procedure updates.

Leadership

• Lead and develop a small team responsible for day‑to‑day control operations, reporting, and continuous improvement.
• Foster a culture of accountability, transparency, evidence discipline, and risk‑based decision making.
• Drive automation and process improvements to improve governance effectiveness and reduce control burden across IT.

Basic Qualifications

• Minimum 10 years of progressive experience in IT governance, risk management, cyber security, regulatory compliance, audit, controls, third‑party risk management, or related disciplines.
• Experience within insurance, reinsurance, financial services firms or work at audit firms or regulators is highly preferred.
• Demonstrated success managing audits, regulatory examinations, control programs, evidence requests, remediation initiatives, and control framework maturity.
• Strong understanding of IT General Controls, ICFR/SOX concepts, audit practices, SOC reporting, NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, and third‑party risk management.
• Proven ability to influence senior leaders and work effectively across business, technology, risk, compliance, finance, legal, and audit functions.
• Bachelor's degree required.
• MBA, Master of Information Systems, Master of Cybersecurity, Master of Enterprise Risk Management, or comparable advanced degree preferred.
• Strong knowledge of governance frameworks, regulatory compliance practices, audit methodology, control testing, issue management, and evidence standards.
• Strong matrix management and influencing skills.
• Excellent communication, stakeholder management, executive presentation, and Board‑level reporting skills.
• Experience with workflow management, dashboards, and control automation solutions preferred.
• Ability to translate regulatory and audit expectations into pragmatic, sustainable operating practices.

Required Education / Certifications

• Bachelor's degree required in Information Systems, Cybersecurity, Risk Management, Accounting, Finance, Business Administration, or a related discipline. MBA or relevant advanced degree preferred.
• One or more professional certifications strongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, or equivalent credentials demonstrating expertise in governance, risk, compliance, audit, cybersecurity, or third‑party risk management.

Pay/Location

Norwalk, CT

Hybrid Structure

Minimal to no travel required

Base salary/hourly rate range for this position in Connecticut is between $170,000 and $ 210,000 Please note that specific compensation decisions are based upon a variety of job‑related factors as permitted by law, including geographic location, credentials, skills, education, training, and experience.

Base salary is just one component of Wilton Re’s total compensation package for employees. Additional compensation includes annual performance‑based bonus, 401K with employer contribution, and profit‑sharing program. Employee may also be eligible for long‑term incentives. All incentives and benefits are subject to the applicable plan terms.

What We Offer

• Competitive vacation and sick time, including company‑paid holidays, floating holidays and early closing days
• 401(k) plan with employer contribution - US Employees Only
• Profit Sharing Program
• Competitive parental leave
• Health, vision, dental, and life insurance, including access to health and wellness programs
• Actuarial Development Program (ADP) for Actuarial employees taking exams
• Employee Assistance Program (EAP)
• Current hybrid working environment
• Employee Engagement Events and various committees on site to join

Wilton Re strives to attract, develop, and retain a diverse workforce. We are committed to providing an inclusive and accessible work environment where all associates feel valued, respected, and supported. Our commitment to inclusivity is reflected in the safeguards, policies, and commitments we have in place to remove barriers and provide equal opportunities to prospective and current associates, without discrimination. A Human Resources representative is available to consult with applicants who require accommodation in the application or recruitment process. Any information shared by the applicant about an accommodation will be treated as confidential.