About this role

Oversee appropriate controls designed and monitored for compliance with policies
Partner across Cybersecurity, Technology, Risk Management, and Internal Audit
Design controls, instrument and automate control monitoring
Evaluate control performance through data-driven assurance
Drive timely remediation of control gaps
Engage in new projects to ensure appropriate controls are implemented
Maintain a prioritized control inventory and define objectives, owners, evidence sources, and monitoring methods
Coordinate with internal audit for quality and timely responses to audit/regulatory requests

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Technology Risk Management, or related field (or equivalent experience)
5+ years of experience in cybersecurity, architecture, IT risk, technology audit
Strong stakeholder management and communication skills
Experience defining control objectives to address risks, designing controls, identifying residual risks, and corrective actions
Working knowledge of security, risk, regulatory, and control frameworks (e.g., NIST CSF/800-53, COBIT, SOC 2)
Experience with cloud and SaaS environments (AWS, Azure, GCP) including cloud security controls
Relevant certifications preferred (e.g., CISSP, CISM, CRISC)

Annual, sales, or other incentive compensation
Opportunities for skill-building, leadership development, and philanthropic activities

Lead, Cybersecurity – IT Control Design and Monitoring

Key skills