AVP Control Testing (AWS Services + ITGC/GRC)

Seeking a Cybersecurity Risk & Assurance professional with10+ years of experience in IT Audit, Cloud Audit, AWS Services, Technology Risk, Cybersecurity GRC, or Information Security to perform independent cybersecurity control testing, CRI maturity assessments, third-party/vendor risk assessments, and SDLC security control validation across on-premise and cloud environments. The role involves evaluating control design and operating effectiveness, assessing compliance with frameworks such as CRI, NIST, CIS, and ISO 27001, validating remediation efforts, and producing audit-quality assessment documentation within a regulated banking/financial services environment.

Must-Have Skills

• Cybersecurity GRC / Technology Risk / IT Audit
• Control Testing & Control Effectiveness Validation
• Third-Party/Vendor Cyber Risk Assessments
• CRI Profile Assessments (preferred)
• Cloud Security (AWS/Azure/GCP) and On-Prem Security Controls
• Vulnerability Management, IAM, Network & Endpoint Security
• Secure SDLC Controls (Threat Modeling, SAST, DAST, CI/CD Security)
• NIST, CIS Controls, ISO 27001 Frameworks
• Risk Reporting, Workpapers & Remediation Validation
• Banking/Financial Services Regulatory Knowledge (FFIEC, OCC, FRB, Basel, GDPR)
• Certifications such as CISSP, CISM, CRISC, CISA, or CCSK/CCAK preferred.