Director of Controls Testing

About the role

The Director of Controls Testing will lead the First Line Information Technology Operational Risk (ITOR) group, overseeing a portfolio of technology, cyber‑security and third‑party risk reviews across Global Technology and Operations. Reporting to senior risk leaders, you will shape risk assessment strategies, drive comprehensive control testing, and partner with first‑line business units to ensure robust governance.

Key responsibilities

• Lead end‑to‑end delivery of complex risk and control reviews for Global Technology, Enterprise Information Security, CTO, and AI offices.
• Develop and execute risk assessment methodologies, scoping, testing plans, and reporting in line with industry standards.
• Manage multiple concurrent review teams, ensuring timely and high‑quality completion of assessments.
• Provide day‑to‑day leadership, coaching, and performance feedback to review teams and direct reports.
• Serve as a trusted partner to first‑line leaders, as well as second‑ and third‑line control functions.

Required profile

• Extensive experience in audit, risk, and control methodology within technology and information security domains.
• Proven ability to lead large, cross‑functional teams and manage complex project portfolios.
• Strong communication skills with senior stakeholders and the ability to influence risk‑aware decision making.
• Deep knowledge of enterprise resiliency, third‑party risk management, and cyber‑security frameworks.

Required skills

• Risk assessment and control testing
• Audit methodology
• Information security frameworks (e.g., ISO 27001, NIST)

What we offer

• Leadership and mentoring opportunities within a global financial services organization.
• Flexible work environment that supports professional growth.
• Access to a high‑performance culture focused on collaboration, accountability, and innovation.