Corporate Vice President - IT Oversight and Governance (PF5)

New York Life•New York, NY

3d•$119,000 - $170,000•Hybrid

About The Position

The Corporate Vice President, IT Oversight and Governance leads IT-focused oversight of internal control over financial reporting across Controllers and Finance. The role helps set the direction for control governance and execution, ensuring standards and practices comply with the NAIC Model Audit Rule (MAR) and the Sarbanes-Oxley Act (SOX). The position supports the Financial Controls Unit Manager in the day-to-day execution of the MAR/SOX Program, with a primary focus on IT controls over financial reporting. It leads testing and evaluation of IT general controls, application controls, end-user computing and third-party service provider controls, and supports testing of business process controls affecting financial reporting. The role also supports materiality assessment and scoping, partners with business units and control owners on consistent application and remediation, and assesses the completeness and accuracy of data used in control execution. The role evaluates system implementations and conversions for their impact on internal control over financial reporting, including ensuring key controls are designed and tested before go-live. It helps develop and maintain AI governance and controls for responsible AI use in financial reporting and control processes. The position collaborates with risk and control functions, provides IT risk and control oversight across Controllers and Finance activities, enhances program tools, training and executive reporting, and supports SOC 1/2 report issuance as a liaison with the service auditor. This is a hybrid position requiring three days per week at the designated work location. The posted salary range is $119,000–$170,000, and the role is exempt and eligible for an annual discretionary bonus.

Requirements

Bachelor’s degree in finance, accounting, computer science, IT or a related field.
CPA, CIA or similar professional certification.
4–8 years of experience in roles with IT audit responsibilities.
Strong knowledge of System and Organization Controls (SOC 1/2) reports.
Understanding of industry frameworks such as COSO, COBIT, the NIST Cybersecurity Framework and the ISO 27000 series.
Strong organizational skills and ability to manage multiple priorities and deadlines in a fast-paced environment.
Ability to partner with business, technology and control functions.
Strong written and verbal communication skills, including ability to explain complex IT risks to non-technical leaders, management and auditors.
Team-oriented and collaborative, with flexibility to shift priorities as needed.
Working knowledge of systems architecture, applications and cloud environments, as well as security and financial reporting risks and controls.
Proficiency in Microsoft Excel, Word, Access, Visio, PowerPoint and SharePoint.
Working knowledge of AI tools and related responsible-use, risk, governance and control considerations.

Nice To Haves

CISA, CISSP, CISM or CRISC certification.
Knowledge of insurance and asset management businesses.
Big Four experience.

Responsibilities

Help develop and maintain MAR/SOX Program governance, policies, standards and procedures.
Support the Financial Controls Unit Manager in day-to-day execution of the MAR/SOX Program, primarily focused on IT controls over financial reporting.
Lead testing and evaluation of IT general controls, application controls, end-user computing and third-party service provider controls; support testing of business process controls affecting financial reporting.
Support materiality assessment and scoping of business processes and IT general controls.
Partner with business units to drive consistent application of MAR/SOX requirements and work with process and control owners to remediate control deficiencies.
Evaluate the completeness and accuracy of source data used in control execution, such as extract files and control reports.
Assess how system implementations and conversions affect internal control over financial reporting, ensuring key controls are designed and tested, including user acceptance testing, before go-live.
Help develop and maintain AI governance and controls for responsible AI use in financial reporting and control processes.
Collaborate with Risk Management, IT Risk and Security, Corporate Audit, External Auditors and other risk and control functions to strengthen governance, risk and compliance integration.
Provide IT risk and control oversight across Controllers and Finance activities, including technology changes and process automation.
Enhance MAR/SOX Program tools, training curriculum and executive reporting on the state of internal control over financial reporting.
Support issuance of SOC 1/2 reports and serve as a liaison with the service auditor through planning, testing, review and reporting.
Participate in risk and control committees and working groups as assigned.
Plan and perform business and technology walkthroughs and IT risk and control assessments; document test procedures and results.
Lead projects and supervise staff and consultants.