Lead, Controls Assurance

Bridgewater Associates•Westport, CT

4d•$225,000 - $375,000•Onsite

About The Position

The Lead, Controls Assurance is a senior individual contributor on Bridgewater’s Security Governance, Risk, and Compliance (GRC) team. The role is responsible for developing, evaluating, testing, and strengthening the design and operating effectiveness of internal security controls across the organization. It partners with business units, technology partners, risk owners, and audit teams to keep controls fit for purpose and meet regulatory and compliance obligations. The position maintains oversight and execution of the Security department’s controls posture, including identifying and mitigating control deficiencies, and has a significant focus on controls automation and monitoring. The role requires developing and leading a Controls Assurance Program, planning and executing testing across operational, security, and technology risk areas, and producing reports and metrics for senior stakeholders and executive leadership. It also supports audits, remediation, continuous improvement of testing methods and tools, and adaptation to regulatory and industry changes. The Security Department’s mission is to protect Bridgewater’s investment engine and business operations. The department evolves its cyber, physical, and staff security practices to meet business needs and respond to the changing threat landscape. The position is onsite four days per week, flexing between Bridgewater’s NYC and CT offices. The wage range is $225,000–$375,000, inclusive of base salary and discretionary bonus; the expected base salary is 70–80% of that range. Bridgewater does not provide immigration sponsorship for this position.

Requirements

Bachelor’s or Master’s degree in an analytical, scientific, liberal arts, or related field.
7–10 years of experience in risk management, information security, and/or cybersecurity compliance.
Proven track record in designing and building controls assurance programs.
Ability to quickly learn business processes, technology use and controls, and associated security controls and risks.
Ability to independently plan and execute testing procedures with minimal oversight.
Ability to synthesize complex ideas and requirements for different audiences and apply conceptual requirements to practical program implementation.
Ability to interpret policies, procedures, and regulatory requirements and apply them to real processes.
Sound professional judgment when assessing control adequacy and risk significance.
Ability to communicate difficult or sensitive findings constructively and diplomatically.
Strong ownership mentality and drive for results.
Passion for security and ability to think critically about practical security problems rather than defaulting to check-the-box thinking.
Values truth, openness, and pursuing excellence.
Ability to thrive in an environment focused on excellence.
Must meet the four-days-onsite requirement, flexing between NYC and CT offices.
Immigration sponsorship is not provided for this position.

Nice To Haves

CISA, CISSP, or related certifications.
Experience in a highly regulated and fast-paced industry, especially financial services.
Knowledge derived from experience operating in a U.S. and/or global asset management regulatory context.
Exposure to global regulatory regimes beyond U.S. regulators such as the SEC and CFTC.

Responsibilities

Develop and lead the Controls Assurance Program at Bridgewater.
Plan and execute control testing plans across operational, security, and technology risk areas.
Gather and review process documentation, evidence, control narratives, and risk-control matrices for accuracy and completeness.
Identify control gaps, design weaknesses, and instances of non-compliance, and document findings clearly.
Partner with process and control owners to remediate issues and track remediation to closure.
Support audit requests, including evidence gathering and walkthroughs.
Prepare assurance reports and dashboards summarizing testing results for senior stakeholders.
Drive continuous improvement of testing methodologies, sampling approaches, control frameworks, tooling, and automation.
Develop risk reporting, metrics, and summary reporting for executive leadership.
Stay current on regulatory changes and industry standards that impact the control environment.
Quickly learn business processes, technology use and controls, and associated security controls and risks.
Develop and execute strategic visions for a mature Controls program.
Independently plan and execute testing procedures with minimal oversight.
Interpret policies, procedures, and regulatory requirements and apply them practically to real processes.
Assess control adequacy and risk significance using sound professional judgment.
Communicate difficult or sensitive findings constructively and diplomatically.
Adapt to new business areas and regulatory changes.