This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We're working with a systemically important financial market infrastructure firm that sits at the center of the global foreign exchange ecosystem. The organization operates critical settlement and risk-management infrastructure used by thousands of counterparties worldwide, processing trillions of dollars in transactions daily. Because of the scale, complexity, and regulatory scrutiny of the environment, technology, cyber, and data risk management are core to the firm’s stability and mission. They are hiring a Director-level leader to head their second line of defense Cyber and Information Risk Independent Review function.
Job Responsibility:
Drive a strong risk culture focused on accountability, transparency, and credible challenge
Define and lead the independent review strategy for cyber and data risk
Influence across a complex, matrixed global organization without direct authority
Establish priorities for horizontal and thematic risk reviews based on emerging threats, incidents, and regulatory expectations
Partner with senior risk leadership to align cyber and data risk oversight with enterprise and operational risk frameworks
Lead firm-wide reviews of key information security and data management risks
Identify gaps in control design and coverage and recommend risk-reducing enhancements
Conduct thematic reviews of operational risk events and remediation initiatives
Challenge whether remediation actions are sufficient and sustainable
Review and challenge remediation plans for adequacy, feasibility, and regulatory alignment
Monitor execution of remediation actions across multiple stakeholders
Escalate concerns where remediation does not sufficiently reduce risk
Ensure issues are closed with appropriate evidence and governance approval
Requirements:
7+ years leading cyber, information security, or data risk governance functions
Coming from a background of Second Line of Defense in a heavily regulated environment
Proven experience designing and executing independent risk review programs
Strong understanding of enterprise and operational risk frameworks
Experience operating in highly regulated, global financial environments
Comfort engaging directly with senior leadership, audit, and regulators
Bachelor’s degree in a technology-related discipline (Master’s preferred)