Information Security and Controls - Vice President

As an Information Security and Controls - Vice President, in the Supplier Issue Management team, you help us maintain robust risk management and supplier oversight. You will work closely with internal stakeholders to review and validate supplier assessment findings, ensuring the process meets our organizational standards. You will also work with our most critical suppliers and our cross line of business representatives in reducing risk exposure to the firm through our third party supplier relationships. Together, we foster a culture of quality, collaboration, and continuous learning.
Job Responsibilities
Review assessment findings for accuracy and compliance with organizational guidance
Validate closure evidence provided by suppliers, including policies, procedures, and documentation
Engage with internal stakeholders to address issue management queries
Provide consultative guidance and leadership to our business partners to help them work with our suppliers in resolving findings through action plans or if necessary understanding the implication of accepting risk
Engage in ongoing consultation for our critical and high risk suppliers, to expedite risk remediation and provide transparency on progress to key business stakeholders
Liaise with business partners to ensure timely remediation of action plans and risk acceptances
Manage the entire issue lifecycle, including identification, creation, modification, extension, and closure validation
Identify opportunities for process improvements within supplier management
Support internal education and share best practices with peers and colleagues
Maintain a thorough understanding of the supplier risk assessment process and ensure all activities align with organizational standards and policies
Communicate effectively with senior management across various business groups
Required Qualifications, Capabilities, and Skills
Minimum 8 years experience in information security, risk management, supplier management, information technology, or cyber security
Understanding of supplier information technology and operational risk, as well as information technology control policies
Excellent verbal communication skills
Experience of delivering written and verbal presentation to senior stakeholders up to managing director level
Ability to collaborate across multiple business groups
Attention to detail in reviewing documentation and evidence
Commitment to maintaining high standards of quality and compliance
Ability to manage multiple tasks and priorities
Proficiency in identifying and implementing process improvements
Strong problem-solving skills
Ability to work effectively in a team-oriented environment
Preferred qualifications, capabilities, and skills
Certification in Information Systems Audit or Risk and Information Systems Control
Experience supporting internal education and best practices sharing
Familiarity with supplier risk assessment processes
Experience in validating closure evidence for compliance
Ability to engage with diverse stakeholders
Knowledge of global supplier management standards
Demonstrated commitment to professional development and continuous learning