VP, IS Risk - Assurance

About WhiteCrow

We are global talent research, insight, and sourcing specialists with offices in the UK, USA, Singapore, Malaysia, Hong Kong, Dubai, and India. Our international reach has helped us to understand and penetrate specialist markets at a global level. In addition to this, our service is also extended to complement our client's in-house talent acquisition teams.

About our client

Our client operates in the consumer financial services space, focusing on making everyday purchases and essential needs more accessible through flexible financing solutions. They support individuals across their financial journey—from obtaining their first line of credit to managing long-term financial flexibility—by enabling more informed and responsible credit decisions.

Our client has built a vast network that connects consumers with a wide range of small and mid-sized businesses, as well as providers in the health and wellness sector. Through this ecosystem, they play a meaningful role in supporting both customer financial well-being and the growth of businesses that form a critical part of the broader economy.

As a VP, IS Risk - Assurance, you will be responsible for...

• Overseeing and executing end to end control assurance activities for all sub functions within Information Security
• Formalizing, Pilot and executing first line of defence (1LOD) assessments for Information Security to proactively identify risks to the business
• Leading the client assessments program by liaising with internal client partners to ensure is meeting client expectations for Information Security Assessments and Audits
• Collaborating with Sourcing and Legal teams to review third-party supplier contracts, ensuring contractual terms align with the defined scope of services and comply with applicable regulatory requirements and governance frameworks
• Supporting execution of FedLine and other assessments by working with internal SMEs, Second and Third Line of defense teams
• Supporting renewal of Cyber Insurance for the organization by working with insurance brokers and key internal stakeholders
• Developing Financial Security Assurance specific security standards and procedures
• Performing other duties and/or special projects as assigned.

What you already have...

• Bachelor's degree in Computer Engineering or related field, with a minimum of 10+ years of experience in Information Security OR in lieu of the Bachelor's degree, a minimum of 12+ years of experience in Information Security.
• 8+ years of progressive experience in information security, technology risk, security controls assurance, or audit, including 5+ years leading teams.
• Good understanding of IS Risk Management Concepts
• Strong working knowledge of IT related US Banking regulations & industry best practices (NIST, PCI DSS, HIPAA, CRI etc.)
• Demonstrated experience designing and executing control testing/assurance programs across multiple security domains
• Exposure to working with external attack surface monitoring tools to partner with internal stakeholders to remediate external risk exposure to the organization
• Proven ability to influence and partner across Information Security, Technology, Risk, Compliance, and Audit functions
• Excellent executive communication skills—able to synthesize complex findings into clear, actionable insights.
• Excellent interpersonal skills with ability to influence team members, management & external groups
• Self-motivated & able to work independently or in a team environment & work with virtual teams.