Vice President - Information Technology and Cyber Risk Management Job at Crédit Agricole (NEW YORK NY OR ISELIN NJ)

Cyber and Information Security Risk Manager, Senior Vice President

This role is critical for safeguarding the bank's financial stability and sustai...

Location

United Kingdom , Belfast

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

10+ years of progressive experience in Cyber & Information Security Risk Management, IT Risk, Security Compliance, or IT Audit, with significant experience in a financial services environment
Demonstrated expertise in identifying, assessing, measuring, monitoring, and reporting on complex cyber and information security risks
Proven track record of designing and leading initiatives to enhance security controls and processes
Extensive experience collaborating with and managing expectations of diverse stakeholders, including business unit leaders, technical teams, and 2nd and 3rd line functions (e.g., Information Security Compliance, Operational Risk, Internal Audit, Regulators)
Strong understanding of evolving cyber threat landscapes, regulatory requirements (e.g., NIST, ISO 27001, GLBA), and industry best practices
Proficient in maintaining risk and control frameworks, including Manager’s Control Assessment (MCA), specifically for Cyber & Information Security risks
Exceptional communication and presentation skills, with the ability to articulate complex cyber risk concepts and their business impact to senior management and governance committees
Ability to act as a primary liaison for all audit and regulatory engagements pertaining to Cyber & Information Security
Strong leadership capabilities with experience in leading and mentoring risk management professionals
Bachelor's degree required

Job Responsibility

Proactively identify and assess evolving Cyber & Information Security risks across the business and technology landscape
Design and lead strategic initiatives to enhance cyber and information security controls and processes, ensuring alignment with risk appetite
Collaborate effectively with business unit leaders and diverse stakeholders to embed robust cyber risk management practices into business operations
Partner with 2nd line functions (e.g., Information Security Compliance, Operational Risk Management) to interpret and apply cyber risk requirements and policies accurately
Engage with 3rd line functions (e.g., Internal Audit, Compliance Assurance) to facilitate independent assessments, address findings, and drive resolution of cyber and information security issues
Maintain comprehensive oversight of cyber risk posture through continuous monitoring of metrics, activity, and corrective action plan execution
Prepare and present clear, concise updates on emerging cyber risks, control effectiveness, and strategic enhancements to senior management and governance committees
Ensure rigorous adherence to information security policies and regulatory requirements, including maintaining a robust Manager’s Control Assessment (MCA) for Cyber & Information Security
Serve as a primary liaison for all internal and external audit engagements related to Cyber & Information Security
Lead and mentor a team focused on cyber risk assessment, regulatory compliance, and efficient reporting and resolution of security-related matters

What we offer

Generous holiday allowance starting at 27 days plus bank holidays
increasing with tenure
A discretional annual performance related bonus
Private medical insurance packages to suit your personal circumstances
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources

Fulltime

Assistant Vice President – Third Party Risk Oversight specialist - TPRO - Consumer Credit Risk

The AVP – Third party risk oversight role is responsible for owning and enhancin...

Location

India , Mumbai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

8+ years of experience in Risk management, third-party risk, vendor risk/management or credit risk with a large financial institution
US banking regulatory expectations
Prior experience operating with consumer credit risk or closely related risk domains
Extensive background in managing critical suppliers and regulated third-party relationships
Experience active as a risk/process oversight owner or leading risk platforms, frameworks, or governance models
Bachelor’s degree in related fields
Working knowledge of Vendor relationship management / Vendor risk management/ TPRO
Growth mindset with ability to balance risk, compliance and business enablement
Excellent stakeholder management and executive communication skills
Ability to challenge vendors and internal partners constructively

Job Responsibility

Product ownership and strategy: Own the end-to-end product vision for third-party risk oversight tools, processes, and controls within consumer credit risk
Own the TPRO vision, roadmap, and backlog, ensuring alignment with Citi risk policies and enterprise standards
Translate regulatory guidance, Citi policies, and risk requirements into User stories, controls, and functional requirements into scalable risk oversight solutions
Prioritize initiatives based on risk severity, regulatory commitments and business impact
Third-party Risk oversight: Oversee risk assessment lifecycle for third-party vendors, including: Inherent risk assessments, Due diligence (financial, operations, cyber, data privacy, model risk), Ongoing monitoring and periodic reviews
Ensure critical and high- risk vendors undergo enhanced oversight and governance
Maintain a risk-tiered vendor inventory aligned with consumer credit risk exposure
Supplier and contract management: Ensure supplier contracts meet regulatory, risk and control standard, including: SLAs, KPI, audit and access rights, data protection, information security, confidentiality, BCP/DR (business continuity planning/ Disaster recover), subcontractor and fourth-party controls
Track contract milestones, renewals, terminations and renegotiations
Proactively identify contracts nearing expirations and drive timely renewals or exit strategies

Fulltime

Crisis & Incident Management Lead – Operational Resilience - Vice President

The VP, Crisis & Incident Management Lead is responsible for the strategic leade...

Location

United States Of America , NEW YORK

Salary:

150000.00 - 180000.00 USD / Year

Crédit Agricole

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Risk Management, Information Technology, Business Continuity, or a related field
Minimum 10+ years of experience in crisis/incident management, operational resilience, or business continuity
Experience leading cross-border incident response and regulatory engagement
Proficiency in English (both written and verbal)
Incident Management: Ability to analyze, prioritize, and manage incidents effectively. Cross-functional command and coordination
Strategic Thinking: Ability to align crisis and incident management initiatives with business objectives and regulatory requirements
Communication&Documentation: Ensure thorough documentation and clear communications over crisis and incident management activities
Leadership&Team Management: Proven track record of building and leading high performing teams. Strong project management skills. Ability to thrive in fast-paced, high-stakes environment
Regulatory Compliance: Expertise in navigating banking regulations and audit readiness. Deep understanding of financial compliance requirements and regulatory frameworks, including FFIEC, DORA, PRA and OCC
Crisis Leadership: Demonstrated ability to lead complex incident response efforts across business, technology, cyber, and third-party domains

Job Responsibility

Develop and lead a crisis and incident management strategy aligned to the bank’s operational resilience framework and key business services
Translate regulatory expectations (e.g., FFIEC, DORA, OCC, PRA) into actionable, risk-informed response strategies
Establish and manage governance forums and escalation protocols for crisis and incident oversight
Support the definition and testing of impact tolerances and maximum tolerable downtimes (MTD/MTLD) in partnership with Operational Resiliency Testing Lead, Business, and Technology stakeholders
Act as the lead coordinator during regional crises, ensuring structured, timely, and effective command, control, and communications
Maintain and continuously improve incident response plans, escalation playbooks, crisis decision trees, and communication protocols
Ensure that major incidents—including those involving third parties and cyber events—are managed in line with regulatory requirements
Integrate internal communications tools and channels into a unified communications strategy
Maintain and operate an auditable major incident log, with clear decision documentation, timelines, and actions taken
Drive optimization of incident response processes using data analytics, metrics and automation opportunities

Fulltime