VP, IT Governance Risk and Compliance

Wilton RE • Norwalk, CT

5d • $170,000 - $210,000 • Hybrid

About The Position

The Vice President, IT Governance, Risk & Compliance is accountable for the governance, oversight, monitoring, reporting, and continuous improvement of Wilton Re’s IT control environment. The role centralizes IT governance, regulatory compliance readiness, audit management, control monitoring, policy governance, and control effectiveness reporting under one senior leader. The VP ensures IT controls are clearly defined, assigned, monitored, tested, evidenced, remediated, and reported in alignment with regulatory requirements, industry frameworks, and business objectives. Maintains a unified IT control framework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, IT General Controls, ICFR requirements, SOC reporting expectations, and relevant third-party assurance standards. This leader partners closely with IT, Legal, Compliance, Finance, Risk Management, Internal Audit, business leaders, auditors, regulators, and third-party service providers. The role provides periodic reporting to executive leadership, governance committees, Audit Committee, and Board stakeholders regarding control effectiveness, risk posture, remediation status, and compliance readiness.

Requirements

• Minimum 10 years of progressive experience in IT governance, risk management, cyber security, regulatory compliance, audit, controls, third-party risk management, or related disciplines.
• Experience within insurance, reinsurance, financial services firms or work at audit firms or regulators is highly preferred.
• Demonstrated success managing audits, regulatory examinations, control programs, evidence requests, remediation initiatives, and control framework maturity.
• Strong understanding of IT General Controls, ICFR/SOX concepts, audit practices, SOC reporting, NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, and third-party risk management.
• Proven ability to influence senior leaders and work effectively across business, technology, risk, compliance, finance, legal, and audit functions.
• Bachelor's degree required.
• MBA, Master of Information Systems, Master of Cybersecurity, Master of Enterprise Risk Management, or comparable advanced degree preferred.
• Strong knowledge of governance frameworks, regulatory compliance practices, audit methodology, control testing, issue management, and evidence standards.
• Strong matrix management and influencing skills.
• Excellent communication, stakeholder management, executive presentation, and Board-level reporting skills.
• Experience with workflow management, dashboards, and control automation solutions preferred.
• Ability to translate regulatory and audit expectations into pragmatic, sustainable operating practices.
• Bachelor's degree required in Information Systems, Cybersecurity, Risk Management, Accounting, Finance, Business Administration, or a related discipline.
• One or more professional certifications strongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, or equivalent credentials demonstrating expertise in governance, risk, compliance, audit, cybersecurity, or third-party risk management.

Nice To Haves

• MBA or relevant advanced degree preferred.
• One or more professional certifications strongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, or equivalent credentials demonstrating expertise in governance, risk, compliance, audit, cybersecurity, or third-party risk management.
• Experience with workflow management, dashboards, and control automation solutions preferred.

Responsibilities

• Own Wilton Re’s IT control framework across operational, regulatory, cybersecurity, and financial reporting control domains.
• Establish control ownership, accountability, evidence requirements, monitoring cadence, issue management, and reporting structures across IT.
• Coordinate across first-line control owners, second-line risk and compliance functions, and Internal Audit to maintain clear accountability and effective governance.
• Maintain readiness for regulatory examinations, audits, and compliance reviews, including NYDFS cybersecurity requirements and relevant insurance or financial services obligations.
• Coordinate responses to auditors, regulators, and examiners, ensuring responses are complete, timely, consistent, and supported by appropriate evidence.
• Manage audit findings, corrective actions, control deficiencies, certifications, attestations, management representations, and remediation activities through closure.
• Establish control monitoring and testing programs, including scope, frequency, performers, reviewers, evidence, exceptions, and remediation status.
• Develop dashboards, metrics, and reporting for executive leadership, governance committees, Audit Committee, and Board stakeholders.
• Establish standards for audit evidence management, retention, traceability, accessibility, and quality review.
• Manage the lifecycle of IT policies, standards, and procedures, including creation, review, approval, publication, evidence, and retirement.
• Ensure policies are maintained in accordance with governance requirements and material change expectations.
• Monitor policy compliance and translate regulatory change and audit expectations into practical IT policy, standard, and procedure updates.
• Lead and develop a small team responsible for day-to-day control operations, reporting, and continuous improvement.
• Foster a culture of accountability, transparency, evidence discipline, and risk-based decision making.
• Drive automation and process improvements to improve governance effectiveness and reduce control burden across IT.

Benefits

• Competitive vacation and sick time, including company-paid holidays, floating holidays and early closing days
• 401(k) plan with employer contribution - US Employees Only
• Profit Sharing Program
• Competitive parental leave
• Health, vision, dental, and life insurance, including access to health and wellness programs
• Actuarial Development Program (ADP) for Actuarial employees taking exams
• Employee Assistance Program (EAP)
• Current hybrid working environment
• Employee Engagement Events and various committees on site to join

What This Job Offers

• Job Type: Full-time
• Career Level: Executive