VP, IT Governance Risk and Compliance

We are searching for an experienced VP, IT Governance Risk and Compliance at our Connecticut office.

VP, IT Governance, Risk& Compliance
Full-Time
Norwalk,CT

Position Summary:
TheVice President, IT Governance, Risk & Compliance is accountable for thegovernance, oversight, monitoring, reporting, and continuous improvement ofWilton Re's IT control environment. The role centralizes IT governance,regulatory compliance readiness, audit management, control monitoring, policygovernance, and control effectiveness reporting under one senior leader.

The VPensures IT controls are clearly defined, assigned, monitored, tested,evidenced, remediated, and reported in alignment with regulatory requirements,industry frameworks, and business objectives. Maintains a unified IT controlframework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500,IT General Controls, ICFR requirements, SOC reporting expectations, andrelevant third-party assurance standards.

Thisleader partners closely with IT, Legal, Compliance, Finance, Risk Management,Internal Audit, business leaders, auditors, regulators, and third-party serviceproviders. The role provides periodic reporting to executive leadership,governance committees, Audit Committee, and Board stakeholders regardingcontrol effectiveness, risk posture, remediation status, and compliancereadiness.

Role Responsibilities:
Governance, Risk &Controls
Own Wilton Re's IT control framework across operational, regulatory, cybersecurity, and financial reporting control domains.
Establish control ownership, accountability, evidence requirements, monitoring cadence, issue management, and reporting structures across IT.
Coordinate across first-line control owners, second-line risk and compliance functions, and Internal Audit to maintain clear accountability and effective governance.
Regulatory Compliance &IT Audit Response
Maintain readiness for regulatory examinations, audits, and compliance reviews, including NYDFS cybersecurity requirements and relevant insurance or financial services obligations.
Coordinate responses to auditors, regulators, and examiners, ensuring responses are complete, timely, consistent, and supported by appropriate evidence.
Manage audit findings, corrective actions, control deficiencies, certifications, attestations, management representations, and remediation activities through closure.
Control Monitoring,Evidence & Reporting
Establish control monitoring and testing programs, including scope, frequency, performers, reviewers, evidence, exceptions, and remediation status.
Develop dashboards, metrics, and reporting for executive leadership, governance committees, Audit Committee, and Board stakeholders.
Establish standards for audit evidence management, retention, traceability, accessibility, and quality review.
Policy Governance
Manage the lifecycle of IT policies, standards, and procedures, including creation, review, approval, publication, evidence, and retirement.
Ensure policies are maintained in accordance with governance requirements and material change expectations.
Monitor policy compliance and translate regulatory change and audit expectations into practical IT policy, standard, and procedure updates.
Leadership
Lead and develop a small team responsible for day-to-day control operations, reporting, and continuous improvement.
Foster a culture of accountability, transparency, evidence discipline, and risk-based decision making.
Drive automation and process improvements to improve governance effectiveness and reduce control burden across IT.

BasicQualifications:
Minimum 10 years of progressive experience in IT governance, risk management, cyber security, regulatory compliance, audit, controls, third-party risk management, or related disciplines.
Experience within insurance, reinsurance, financial services firms or work at audit firms or regulators is highly preferred.
Demonstrated success managing audits, regulatory examinations, control programs, evidence requests, remediation initiatives, and control framework maturity.
Strong understanding of IT General Controls, ICFR/SOX concepts, audit practices, SOC reporting, NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, and third-party risk management.
Proven ability to influence senior leaders and work effectively across business, technology, risk, compliance, finance, legal, and audit functions.
Bachelor's degree required.
MBA, Master of Information Systems, Master of Cybersecurity, Master of Enterprise Risk Management, or comparable advanced degree preferred.
Strong knowledge of governance frameworks, regulatory compliance practices, audit methodology, control testing, issue management, and evidence standards.
Strong matrix management and influencing skills.
Excellent communication, stakeholder management, executive presentation, and Board-level reporting skills.
Experience with workflow management, dashboards, and control automation solutions preferred.
Ability to translate regulatory and audit expectations into pragmatic, sustainable operating practices.

Required Education /Certifications:
Bachelor's degree required in InformationSystems, Cybersecurity, Risk Management, Accounting, Finance, BusinessAdministration, or a related discipline. MBA or relevant advanced degreepreferred.
One or more professional certificationsstrongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, orequivalent credentials demonstrating expertise in governance, risk, compliance,audit, cybersecurity, or third-party risk management.

Pay/Location:
Norwalk, CT
Hybrid Structure
Minimal to no travel required

Base salary/hourly rate range for thisposition in Connecticut is between $170,000 and $ 210,000 Please note thatspecific compensation decisions are based upon a variety of job-related factorsas permitted by law, including geographic location, credentials, skills,education, training, and experience.
Base salary is justone component of Wilton Re's total compensation package for employees.Additional compensation includes annual performance-based bonus, 401K withemployer contribution, and profit-sharing program. Employee may also beeligible for long-term incentives. All incentives and benefits are subject tothe applicable plan terms.

What We Offer:
Competitive vacation and sick time, including company-paid holidays, floating holidays and early closing days
401(k) plan with employer contribution - US Employees Only
Profit Sharing Program
Competitive parental leave
Health, vision, dental, and life insurance, including access to health and wellness programs
Actuarial Development Program (ADP) for Actuarial employees taking exams
Employee Assistance Program (EAP)
Current hybrid working environment
Employee Engagement Events and various committees on site to join

To AllRecruitment Agencies: Please do not send anyresumes or solicitations regarding open positions to Wilton Re employees unlessyou have been requested to work on this position or other positions with WiltonRe; please reach out to your main point of contact. Wilton Re is not responsiblefor any fees related to unsolicited resumes.