Lead, Controls Assurance (Cybersecurity)

Location: Westport, CT; four days onsite per week, flexing between the NYC and CT offices. Immigration sponsorship is not provided.

Compensation: $225,000–$375,000 inclusive of base salary and discretionary bonus; expected base salary is 70–80% of this range.

Company

hirify.global Associates is an asset management firm serving global institutional investors through investment research, technology, and investment principles.

What you will do

• Develop and lead the Controls Assurance Program across operational, security, and technology risk areas.
• Plan and execute control testing, including documentation review, evidence evaluation, sampling, and control walkthroughs.
• Identify control gaps, design weaknesses, and non-compliance; document findings and partner with control owners on remediation through closure.
• Support audit requests and prepare assurance reports, dashboards, risk metrics, and executive summaries.
• Improve testing methodologies, control frameworks, sampling approaches, tooling, and controls automation for evidence collection, monitoring, and reporting.
• Monitor regulatory changes and industry standards affecting the security control environment.

Requirements

• Bachelor’s or Master’s degree in an analytical, scientific, liberal arts, or related field.
• 7–10 years of experience in risk management, information security, and/or cybersecurity compliance.
• Proven experience designing and building controls assurance programs.
• Knowledge of the policy, standards, implementation, and assurance aspects of a mature security GRC program.
• Knowledge of SOC 1/SOC 2 criteria, NIST, CIS, applicable regulatory and internal control frameworks, and control self-assessment practices.
• Experience designing, implementing, and maintaining comprehensive IT and security controls programs.
• Knowledge of data analysis techniques for control testing, audit methodologies, sampling, evidence standards, and remediation tracking.
• Ability to independently plan and execute testing with minimal oversight, interpret requirements practically, assess control adequacy and risk, and communicate sensitive findings constructively.
• Ability to learn business processes and technology controls quickly, synthesize complex requirements, incorporate feedback, adapt to regulatory changes, and take ownership for results.

Nice to have

• CISA, CISSP, or related certification.
• Experience in a highly regulated, fast-paced industry, especially financial services.
• Experience in a U.S. and/or global asset management regulatory context.
• Exposure to global investment-management regulatory regimes beyond U.S. regulators such as the SEC and CFTC.

Culture & Benefits

• Culture focused on excellence, continuous improvement, truth, openness, transparency, inclusion, and meritocracy.
• Opportunities for professional development, personal growth, and challenging work.
• Competitive benefits package.
• Onsite work in the NYC and CT offices is required four days per week.