IT Risk & Control Director - Cybersecurity

Location: Minnetonka, MN, United States; other locations include Columbus, OH, Detroit, MI, Charlotte, NC, and Dallas, TX. Workplace type: Office.

Salary: $125,000–$255,000 annual base salary, plus eligibility for applicable incentive compensation.

Company

hirify.global National Bank is a financial institution providing banking and financial services in a regulated environment.

What you will do

• Serve as a senior Technology Risk partner to Cybersecurity and Technology leadership, providing risk insight, advice, and constructive challenge.
• Assess risk across IAM, PAM, data protection, cloud security, vulnerability and exposure management, application security, security architecture, cyber operations, endpoint and network security, and incident-related risk.
• Partner with control owners on identity lifecycle management, privileged access, sensitive data protection, cloud adoption, vulnerability exposure, risk assessments, control assessments, issues, exceptions, remediation, and risk acceptance.
• Analyze cybersecurity findings, metrics, control deficiencies, and risk indicators to identify systemic conditions, risk concentrations, dependencies, and emerging risks.
• Translate technical cybersecurity conditions into business impact, including unauthorized access, data compromise, fraud, service disruption, customer impact, financial loss, and regulatory exposure.
• Prepare executive and Board reporting, regulatory responses, risk assessments, and decision materials; participate in governance forums and lead a high-performing Technology Risk team.

Requirements

• Bachelor’s degree or equivalent work experience and 10+ years in a related role.
• Significant experience in first-line technology risk, cybersecurity risk, information security risk, or a comparable risk and control function within a financial institution or other highly regulated organization.
• Experience across multiple cybersecurity disciplines, particularly IAM/PAM, data protection, cloud security, vulnerability management, cybersecurity controls, or related security domains.
• Experience operating within the three lines model and partnering with Technology and Cybersecurity control owners, Independent Risk, Compliance, Internal Audit, and regulatory stakeholders.
• Experience advising senior leaders on cybersecurity and technology risks without assuming ownership of the underlying operational process or control.
• Ability to translate complex cybersecurity conditions into business risk, control implications, residual risk considerations, risk trends, and decision-oriented executive insights.
• Experience leading senior professionals and developing risk talent within complex, matrixed organizations.
• Deep understanding of IAM and PAM, including identity governance, authentication, authorization, MFA, privileged access, entitlement management, access certification, service and non-human identities, and identity lifecycle management.
• Strong understanding of data protection, cloud security, vulnerability and exposure management, application security, security architecture, endpoint and network security, cybersecurity operations, and incident-related risk.
• Working knowledge of NIST Cybersecurity Framework, NIST SP 800-53, NIST Zero Trust guidance, CIS Controls, and ISO/IEC 27001.
• Experience assessing risk in major public-cloud environments such as Microsoft Azure, AWS, or GCP.
• Experience with risk assessments, RCSAs and control assessments, issue management, risk acceptance, remediation governance, control testing results, KRIs, audit engagement, and regulatory examinations.
• Ability to identify systemic and aggregate risk themes and provide constructive, credible challenge while maintaining collaborative relationships and clear ownership boundaries.
• Strong executive presence and written and verbal communication skills for communicating with senior management, Board-level audiences, regulators, Independent Risk, and Internal Audit.

Nice to have

• Relevant certifications such as CISSP, CISM, CRISC, CISA, CCSP, or comparable cybersecurity or risk credentials.

Culture & Benefits

• Office-based work environment, with certain positions potentially eligible for a flexible combination of in-office and work-from-home work; specific arrangements are provided by the hiring team.
• Health insurance, wellness program, life and disability insurance, retirement savings plan, paid leave, paid holidays, and paid time off.
• Exempt position and eligibility for applicable incentive compensation.
• Collaborative work across Cybersecurity, Technology, Data, business-aligned technology teams, Independent Risk, Compliance, Legal, Privacy, Audit, and other enterprise stakeholders.