Cyber Risk Controls Officer

Fiserv•Omaha, NJ

7d•Onsite

About The Position

You will be responsible for strengthening cyber risk governance and control execution across your assigned portfolio. You will partner with Risk, Audit, Security, and technology teams to assess control effectiveness, identify compliance gaps, drive remediation plans, and provide transparent reporting on cyber risk posture and progress against Fiserv standards.

Requirements

10+ years of experience in cyber, risk, controls, or information security risk management, including assessing control effectiveness and managing remediation
10+ years of experience in technology risk, compliance, controls governance, or related roles within a complex enterprise environment
5+ years of experience partnering with server (distributed, mainframe, cloud) and network infrastructure technology
5+ years of experience coordinating risk reviews, control assessments, issue management, and cross-functional remediation activities with technical and non-technical stakeholders.
Bachelor’s degree in computer science, or a relevant field, or an equivalent combination of education, work, and/or military experience

Nice To Haves

Well versed in all aspects of Software Development Lifecycle (SDLC) and best practices
Strong organizational and analytical skills with the ability to collaborate and communicate with stakeholders to identify, evaluate, and recommend practical mitigation strategies in a fast-paced environment
Experience with cyber control frameworks and industry standards such as NIST Cybersecurity Framework, ISO 27001, COBIT, PCI DSS, and ITIL
Experience with governance, risk, and compliance tools and practices for tracking issues, evidence, and remediation activities
Experience in the financial services industry

Responsibilities

Serve as the First Line of Defense Controls Lead for the Business Unit, partnering with Risk Office, Audit, Information Security, and technology teams to ensure cyber risk requirements and standards are met.
Proactively assess Applications and processes for compliance to and alignment with Fiserv cyber policies, standards, and control requirements by identifying gaps and coordinating remediation with control owners and technical teams.
Provide subject matter expertise on Fiserv Policies and Standards and guide app dev teams in implementing risk mitigation and reduction strategies.
Govern, track, and report on the status of control deficiencies, risk issues, and remediation efforts through to closure.
Provide executive-level reporting on cyber risk posture, key control metrics, remediation progress, and emerging issues, including timely escalation where needed.
Work closely with risk assessment owners, application owners, and control stakeholders to manage issues, action plans, and evidence in accordance with firm standards.
Support control testing readiness, audit responses, and regulatory examination activities by ensuring documentation, evidence, and remediation artifacts are complete and current.
Promote sustainable control execution by driving consistency in governance routines, issue management, and risk treatment processes across the portfolio.