Cyber Security Architect
- Snap Code Inc.
13 Hours Ago
NA
W2
Remote
8-10 Years
Required Skills: Cyber Security , GRC , NIST , CSF , ISO, CTPRP , CISA, CISSP , CISM, CRISC
Job Description
Cyber Security Architect with Banking Domain Experience
Client is a large financial services organization. This role runs the operational side of its supplier cybersecurity risk program. That covers managing audit findings and maintaining the security requirements and assessment questions suppliers are evaluated against.
What You Will Do:
- Manage audit and regulatory findings and their remediation plans
- Support internal audit and regulatory examiners
- Maintain the security requirements suppliers must meet and the assessment questions used to test them
- Keep requirements and questions aligned to security standards and industry frameworks such as NIST
Required Experience:
- 8+ years in cyber risk or GRC, including 4+ years in third party risk
- Ownership of audit and regulatory findings and remediation plans
- Supporting internal audit and examiner requests
- Maintaining supplier security requirements and assessment question sets mapped to NIST CSF, NIST 800-53, and ISO 27001
- Strong leadership and influence skills
Nice to Have:
- Bank regulator exam experience with the OCC, FRB, or FFIEC
- Familiarity with FS-ISAC and Shared Assessments (SIG)
- Program or operating model design
Preferred Certifications (any one):
CTPRP, CISA, CISSP, CISM, or CRISC
CTPRP, CISA, CISSP, CISM, or CRISC
Background We re Looking For:
- Regulated bank experience is highly valued
- Strongly preferred: experience inside a large financial services or other regulated enterprise (bank, insurer, card issuer, asset manager)
- Big 4 or managed security provider consulting experience is welcome if the candidate was embedded with an enterprise team
