Job Description

Our client is seeking an experienced Cyber Risk & Regulatory Banking Specialist to support the second line of defense for a foreign bank's technology and cyber risk function. In this role, you will perform independent reviews, assess control design and execution, and deliver high-quality, regulator-ready documentation and risk opinions to senior stakeholders.

Responsibilities & Qualifications

• Perform independent second-line review and challenge of technology risk, cybersecurity, and operational resilience controls
• Assess control design and execution across information risk management, IT audit, access management, and incident response domains
• Identify and distinguish regulatory, framework, control-design, execution, evidence, governance, and operating-model gaps; recommend proportionate corrective actions
• Document risk conclusions and communicate material issues to senior stakeholders in clear, concise formats
• Deliver high-quality outputs aligned with fixed milestones, including regulator-ready documentation and risk opinions
• Evaluate third-party technology risk, cloud risk, SaaS risk, and cyber incident recovery capabilities
• Apply expertise in IAM/MFA, privileged access management, vulnerability management, and IT operations to support risk assessments and control evaluations
• Support the development and maintenance of risk documentation, control assessments, and regulatory compliance frameworks

Requirements

• 8–12 years of experience in information risk management, cybersecurity, technology risk, or IT audit within a banking or regulated financial services environment
• Strong knowledge of U.S. banking regulatory expectations, operational resilience frameworks, and second-line risk review processes
• Demonstrated expertise in technology controls assessment, cyber resilience, control design evaluation, and risk documentation
• Proficiency in incident response, access management, privileged access management (PAM), and vulnerability management
• Professional certification in cybersecurity and risk domains (CISA, CISM, CISSP, or CRISC preferred)
• Excellent analytical, writing, and project management skills with demonstrated ability to produce concise, regulator-ready outputs
• Strong stakeholder management and communication skills; ability to translate complex technology and cyber risks into clear business language for senior leadership