Audit Manager

Client Assurance & TPRM Manager - Assistant Vice PresidentGreenwich, Connecticut, United States; Stamford, Connecticut, United StatesAbout the RoleiCapital is seeking an experienced cybersecurity risk professional to serve as Assistant Vice President, Third-Party Risk & Client Assurance Manager. This individual will lead a team of approximately five professionals across two complementary cybersecurity risk functions: Third-Party Risk Management (TPRM) and Client Assurance. The ideal candidate will be a hands-on leader who can effectively manage, mentor, and develop team members while also possessing the technical knowledge and practical experience necessary to perform the work of either function, when needed. This role requires strong cybersecurity risk assessment skills, excellent written and verbal communication, sound judgment, and the ability to manage competing priorities and relationships with internal stakeholders, third-party vendors, clients and prospective clients. This individual will be responsible for supporting organization's clients and prospective clients by providing timely, accurate, and consistent responses to cybersecurity due diligence and assurance requests while also ensuring that third-party (vendor) cybersecurity risks are appropriately identified, assessed, documented, and escalated.ResponsibilitiesLead, manage, and mentor a team of approximately five professionals supporting Third-Party Risk and Client Assurance activities.Provide day-to-day directions, coaching, technical guidance, and professional development to team members.Establish clear expectations, priorities, and accountability across both functions.Review team deliverables to ensure assessments and client responses are accurate, complete, consistent, and appropriately supported.Serve as an escalation point for complex cybersecurity risk assessments, client inquiries, vendor issues, and competing business priorities.Maintain the ability to work directly on assessments and client assurance requests when workload, complexity, or business needs require additional support.Identify opportunities to improve team processes, documentation, quality, efficiency, and scalability.Develop and monitor appropriate metrics and reporting to communicate workload, performance, risk trends, and program effectiveness to management.Qualifications10 years of relevant professional experience, with significant experience in cybersecurity, information security risk management, technology risk, third-party risk management, client assurance, or related disciplinesDemonstrated experience completing or reviewing cybersecurity due diligence questionnaires and responding to client or customer security inquiriesDemonstrated experience performing cybersecurity risk assessments of third-party vendorsPrior experience leading, mentoring, or managing cybersecurity, risk, or assurance professionalsAble to manage multiple concurrent assessments, client requests, deadlines, and priorities in a fast-paced environmentAbility to operate effectively, including independently managing responsibilities, exercising sound judgment, influencing stakeholders, and escalating material issues appropriatelyStrong working knowledge of cybersecurity controls and concepts, including identity and access management, vulnerability and patch management, security monitoring and incident response, data protection and encryption, network and infrastructure security, cloud security, secure software development, business continuity and disaster recovery, and security governance and risk managementExperience reviewing cybersecurity assurance documentation such as SOC 1/SOC 2 reports, ISO 27001 certifications, penetration testing reports, security policies, and related control evidenceStrong analytical skills and the ability to distinguish meaningful cybersecurity risks from lower-impact observationsExcellent written communication skills, including the ability to translate complex technical concepts into clear, concise language appropriate for clients, vendors, business stakeholders, and senior managementStrong interpersonal skills and the ability to work effectively with both technical and non-technical stakeholdersBachelor's degree in cybersecurity, information technology, computer science, risk management, or related discipline, or equivalent professional experience is preferred and master's degree in the same is a plusRelevant professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent is a plusExperience within financial services or another highly regulated industry is a plusExperience with third-party risk management, GRC, questionnaire automation, or client assurance platforms is a plusExperience developing metrics, reporting, procedures, and governance processes for cybersecurity risk or assurance programs is a plusBenefitsThe base salary range for this role is $100,000 to $140,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO). We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.