Lead Control Management Officer - Platform Assurance

Lead and perform complex platform assurance assessments across IT General Controls (ITGC), platform engineering controls, and supporting technology services Conduct technical walkthroughs, develop testing plans, review evidence, and lead control discussions across stakeholder groups Perform hands‑on control testing for cloud platforms including GCP, AWS, and Azure, as well as private cloud, IAM,

CI/CD

, data platforms, databases, and container platforms Identify and assess Consumer/Producer requirements and evaluate implementation across enabling technologies and system‑of‑record governance Analyze evidence, document findings, assess platform risk posture, and identify technology risks Support issue lifecycle activities including root cause analysis, remediation plan review, control design improvement, and evidence validation Contribute to thematic analysis, threat modeling, Red Team exercises, and audit reviews Maintain and mature the platform control framework across Cloud, IAM, CI/CD, Data Management, and PAM domains Support governance routines, audit readiness, regulatory documentation, senior reporting packages, assessment artifacts, testing documentation, and risk summaries Build relationships across Technology and Control Management to drive consistent risk management practices Stay current on emerging technology trends, cloud control models, and regulatory expectations Provide guidance and mentorship to junior assessors and team members Requirements 5+ years of Risk Management or Financial Services Industry experience, or equivalent experience demonstrated through work experience, training, military experience, or education 5+ years of Technology Risk, Control Management, Information Security, IT Audit, SOX, or related experience 3+ years of experience testing ITGC, platform controls, cloud technologies, IAM, CI/CD pipelines, or data platforms Certifications such as Cloud Security Engineer, Security Architect, CISSP, CISA, CRISC, or similar are desired Experience with monitoring tools, configuration management, or automation technologies is desired Knowledge of encryption standards, data protection, container security, or identity governance frameworks is desired Strong written and verbal communication skills Ability to collaborate across diverse partner groups Ability to manage multiple assessments and deadlines in a matrixed environment Ability to engage and influence partners across Technology, Cyber Security, Architecture, and Risk Ability to perform complex assessments and clearly convey control weaknesses and recommendations Visa sponsorship is not available for this position Core Competencies Demonstrates expertise in Risk Management, Technology Risk, and Control Management, with a strong focus on cloud platforms, IT General Controls, and compliance frameworks. Proven ability to conduct complex assessments, analyze risks, and provide actionable recommendations while mentoring junior team members. Highest-signal resume keywords Risk Management Technology Risk IT General Controls (ITGC) Cloud Security Engineer Certification CISSP Certification Hard Skills Control Testing Cloud Platforms (GCP, AWS, Azure) IAM CI/CD Data Platforms Root Cause Analysis Threat Modeling Audit Reviews Control Design Improvement Evidence Validation Soft Skills Strong Written Communication Strong Verbal Communication Collaboration Influencing Partners Managing Multiple Assessments Certifications & Qualifications Cloud Security Engineer Security Architect

CISSP

CISA

CRISC

Industry Keywords Financial Services Data Protection Container Security Identity Governance Regulatory Documentation Tools & Technologies Monitoring Tools Configuration Management Automation Technologies #J-18808-Ljbffr Jobtailor