Job Description
Responsible for overseeing regulatory compliance and execution risk related to technology, cybersecurity, and data privacy. The role provides regulatory advisory support to IT and business units, monitors applicable laws and supervisory expectations (e.g., GLBA, GDPR, FFIEC, NYDFS), and ensures alignment with industry standards. The position supports RCSA, identifies control gaps, collaborates on risk mitigation, oversees compliance monitoring and reporting, and assists with incident response and remediation to strengthen enterprise technology and data governance.
- Requirements:
- 5+ years of IT RCSA/Risk experience
- Deep knowledge of GLBA, GDPR, CCPA, NYDFS 23 NYCRR 500, FFIEC IT Handbook, and related cybersecurity and data protection frameworks.
- Hands-on experience in IT risk management, cybersecurity governance, data protection controls, and regulatory compliance within financial services.
- RCSA Experience – Proven experience supporting RCSA, issue management, control design validation, and regulatory change integration in a FLoD environment.
- Regulatory Advisory & Stakeholder Engagement Skills – Ability to interpret complex regulations and provide practical guidance to IT, security, and business stakeholders while exercising effective challenge.
- Strong Analytical & Reporting Capabilities – Experience conducting risk assessments, monitoring compliance metrics, escalating material risks, and delivering executive-level reporting
Apply Now
Apply Now