Head of Cyber Regulatory Controls

Head of Cyber Regulatory Control (Americas) is a key leadership role, reporting to the Head of Global Cyber Regulatory Control within the Cyber Posture and Assurance team, part of Global CISO. The role holder will represent activities specifically within the Americas/US time zone. They are responsible for ensuring that our internal enterprise cyber security control framework is aligned with the Americas regulatory expectations, internal risk appetite, and industry standards and in support of the wider global position. This role contributes to driving cyber control effectiveness across the technology estate, partnering with engineering, operational risk, and compliance teams to embed security-by-design practices and close control gaps. The director leads preparations for regulatory exams, supervisory engagements, and regulator led assessment, serving as a central point of coordination with internal and external auditors as well as with key regulatory bodies in the Americas time zone. With deep expertise in control frameworks (e.g., NIST, ISO, CIS), cyber threat landscapes, and regulatory expectations of Americas Regulators such as FDIC, FRBNY, DFS and SEC / FINRA, the successful candidate will ensure the organization remains resilient, defensible, and regulator-ready at all times.