About the Role
This role leads cybersecurity governance, executive engagement, policy development, regulatory relations, and examination readiness to ensure effective oversight of enterprise-wide cybersecurity risks. It serves as the primary cybersecurity liaison for regulators, managing the entire regulatory interaction lifecycle.
Responsibilities
- Lead the cybersecurity governance framework and operating model.
- Oversee governance forums, management committees, escalation processes, accountability structures, and executive reporting.
- Drive governance maturity across cybersecurity functions.
- Establish governance metrics and effectiveness measures.
- Ensure governance activities support cyber risk management objectives and Board expectations.
- Own the cybersecurity policy and standards framework.
- Oversee policy development, maintenance, approval, communication, implementation, and review.
- Govern exceptions, waivers, and compensating control processes.
- Ensure policy alignment with regulatory requirements, industry frameworks, and enterprise policies.
- Monitor policy effectiveness.
- Lead all cybersecurity examinations, supervisory reviews, and regulatory interactions.
- Develop and maintain cybersecurity examination readiness programs.
- Coordinate examination preparedness activities, evidence production, stakeholder training, and management reviews.
- Manage regulatory intake, engagement governance, and examination coordination.
- Monitor emerging regulatory expectations and supervisory trends.
- Advise executive leadership regarding regulatory developments and potential impacts.
- Own the end-to-end process for cybersecurity regulatory questionnaires, information requests, due diligence reviews, regulatory surveys, and compliance assessments.
- Establish governance processes, response standards, review requirements, and approval workflows.
- Coordinate response development and ensure consistency across relevant departments.
- Ensure responses are accurate, evidence-based, risk-informed, and aligned with approved enterprise positions.
- Maintain executive oversight and quality review of all submitted responses.
- Track supplemental requests, commitments, actions, and remediation activities.
- Ensure traceability between responses, supporting evidence, policies, standards, controls, risks, and issue records.
- Own the cybersecurity regulatory repository.
- Maintain examination artifacts, evidence inventories, response libraries, commitments, regulatory correspondence, and historical submissions.
- Establish standards for response reuse, documentation quality, evidence traceability, and version control.
- Ensure sustainable examination and regulatory readiness.
- Lead preparation of executive and Board reporting related to cyber risk, governance, examination readiness, and regulatory commitments.
- Communicate strategic governance and regulatory insights to executive management.
- Represent cybersecurity governance and regulatory matters in senior leadership and regulatory forums.
Requirements
- 15+ years of leadership experience in cybersecurity governance, regulatory affairs, compliance, operational risk, audit, enterprise risk management, or technology governance.
- Significant experience leading regulatory examinations, supervisory engagements, and regulatory response programs within a highly regulated organization.
- Demonstrated expertise in cybersecurity governance frameworks, policy management, regulatory compliance, and Board governance.
- Strong understanding of global financial services regulatory expectations and risk management practices.
- Experience developing enterprise-wide governance and compliance programs.
- Proven ability to influence executive leadership and regulators.
- Exceptional written, verbal, and presentation skills.
- Bachelor's degree required.
Skills
- Cybersecurity governance
- Regulatory affairs
- Compliance
- Operational risk
- Audit
- Enterprise risk management
- Technology governance
- Regulatory examinations
- Supervisory engagements
- Regulatory response programs
- Policy management
- Board governance
- Global financial services regulatory expectations
- Risk management practices
- Enterprise-wide governance programs
- Compliance programs
- Executive leadership influence
- Regulator influence
- Written communication
- Verbal communication
- Presentation skills
- Master's degree in Cybersecurity, Business Administration, Risk Management, Law, Public Policy, or related discipline
- CISSP
- CISM
- CRISC
- CISA
- CGEIT
- Comparable professional certifications
- Primary regulator-facing executive experience
- Global policy and standards program leadership
- Governance Committee support
- Management of regulatory commitments across multiple jurisdictions
- NIST Cybersecurity Framework
- ISO 27001
- FFIEC
- FCA
- MAS
- APRA
- ECB
- Governance technologies
- Reporting technologies
- Regulatory workflow technologies
Location
- Primary location specified
Work Type
- Full-time
Experience Level
- 15+ years of leadership experience
Education Level
- Bachelor's degree required
- Advanced degree preferred
- Master's degree in Cybersecurity, Business Administration, Risk Management, Law, Public Policy, or related discipline
Salary/Compensations
- $170,000 - $282,500 Annual
Benefits
- Retirement savings plan (401K) with company match
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
- Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
- Access to Employee Assistance Program
- Incentive compensation including eligibility for annual performance-based awards
- Eligibility for certain tax advantaged savings plans
About the Company
- Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability.
- We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.
- We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential.
- As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most.
- Join us in shaping the future.
Equal Opportunity
- As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.
