Citizens Financial GroupNYSE: CFG: US regional bank holding providing diverse financial services.
Experience performing third-party vendor assessments and understanding of cyber security controls and regulatory frameworks (ISO 27001, GLBA, SOX, PCI, HIPAA, FFIEC). Able to evaluate controls, perform QA, and support remediation and regulatory exam activities.
WHOOP: Wearable technology developing health and fitness tracking devices.
6+ YOE6+ years in GRC with AI/ML risk assessment, third-party risk management, policy development, audit coordination, and mapping controls to standards; bachelor’s degree in related field.
ISO/IEC 42001, NIST Cybersecurity Framework, NIST AI Risk Management Framework, EU AI Act, GDPR, PCI DSS, LLM