VP, IT Governance Risk and Compliance

VP, IT Governance, Risk Compliance Full-Time Norwalk, CT About the Company: Wilton Re is an industry leader in the life (re)insurance space, specializing in the acquisition of in force life insurance and annuities. We are experienced industry specialists focused on the risk, capital, and operational needs of our clients’ businesses. We provide our clients with the services they need from in force transactions and product development to underwriting and new business strategies. Wilton Re has the resources and expertise to pursue and successfully manage the largest life and annuity transactions in the company. Position Summary: The Vice President, IT Governance, Risk Compliance is accountable for the governance, oversight, monitoring, reporting, and continuous improvement of Wilton Re’s IT control environment. The role centralizes IT governance, regulatory compliance readiness, audit management, control monitoring, policy governance, and control effectiveness reporting under one senior leader. The VP ensures IT controls are clearly defined, assigned, monitored, tested, evidenced, remediated, and reported in alignment with regulatory requirements, industry frameworks, and business objectives. Maintains a unified IT control framework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, IT General Controls, ICFR requirements, SOC reporting expectations, and relevant third-party assurance standards. This leader partners closely with IT, Legal, Compliance, Finance, Risk Management, Internal Audit, business leaders, auditors, regulators, and third-party service providers. The role provides periodic reporting to executive leadership, governance committees, Audit Committee, and Board stakeholders regarding control effectiveness, risk posture, remediation status, and compliance readiness. Role Responsibilities: Governance, Risk Controls Own Wilton Re’s IT control framework across operational, regulatory, cybersecurity, and financial reporting control domains. Establish control ownership, accountability, evidence requirements, monitoring cadence, issue management, and reporting structures across IT. Coordinate across first-line control owners, second-line risk and compliance functions, and Internal Audit to maintain clear accountability and effective governance. Regulatory Compliance IT Audit Response Maintain readiness for regulatory examinations, audits, and compliance reviews, including NYDFS cybersecurity requirements and relevant insurance or financial services obligations. Coordinate responses to auditors, regulators, and examiners, ensuring responses are complete, timely, consistent, and supported by appropriate evidence. Manage audit findings, corrective actions, control deficiencies, certifications, attestations, management representations, and remediation activities through closure. Control Monitoring, Evidence Reporting Establish control monitoring and testing programs, including scope, frequency, performers, reviewers, evidence, exceptions, and remediation status. Develop dashboards, metrics, and reporting for executive leadership, governance committees, Audit Committee, and Board stakeholders. Establish standards for audit evidence management, retention, traceability, accessibility, and quality review. Policy Governance Manage the lifecycle of IT policies, standards, and procedures, including creation, review, approval, publication, evidence, and retirement. Ensure policies are maintained in accordance with governance requirements and material change expectations. Monitor policy compliance and translate regulatory change and audit expectations into practical IT policy, standard, and procedure updates. Leadership Lead and develop a small team responsible for day-to-day control operations, reporting, and continuous improvement. Foster a culture of accountability, transparency, evidence discipline, and risk-based decision making. Drive automation and process improvements to improve governance effectiveness and reduce control burden across IT. Basic Qualifications: Minimum 10 years of progressive experience in IT governance, risk management, cyber security, regulatory compliance, audit, controls, third-party risk management, or related disciplines. Experience within insurance, reinsurance, financial services firms or work at audit firms or regulators is highly preferred. Demonstrated success managing audits, regulatory examinations, control programs, evidence requests, remediation initiatives, and control framework maturity. Strong understanding of IT General Controls, ICFR/SOX concepts, audit practices, SOC reporting, NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500, and third-party risk management. Proven ability to influence senior leaders and work effectively across business, technology, risk, compliance, finance, legal, and audit functions. Bachelor's degree required. MBA, Master of Information Systems, Master of Cybersecurity, Master of Enterprise Risk Management, or comparable advanced degree preferred. Strong knowledge of governance frameworks, regulatory compliance practices, audit methodology, control testing, issue management, and evidence standards. Strong matrix management and influencing skills. Excellent communication, stakeholder management, executive presentation, and Board-level reporting skills. Experience with workflow management, dashboards, and control automation solutions preferred. Ability to translate regulatory and audit expectations into pragmatic, sustainable operating practices. Required Education / Certifications: Bachelor's degree required in Information Systems, Cybersecurity, Risk Management, Accounting, Finance, Business Administration, or a related discipline. MBA or relevant advanced degree preferred. One or more professional certifications strongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, or equivalent credentials demonstrating expertise in governance, risk, compliance, audit, cybersecurity, or third-party risk management. Pay/Location: Norwalk, CT Hybrid Structure Minimal to no travel required Base salary/hourly rate range for this position in Connecticut is between $170,000 and $ 210,000 Please note that specific compensation decisions are based upon a variety of job-related factors as permitted by law, including geographic location, credentials, skills, education, training, and experience. Base salary is just one component of Wilton Re’s total compensation package for employees. Additional compensation includes annual performance-based bonus, 401K with employer contribution, and profit-sharing program. Employee may also be eligible for long-term incentives. All incentives and benefits are subject to the applicable plan terms. What We Offer: Competitive vacation and sick time, including company-paid holidays, floating holidays and early closing days 401(k) plan with employer contribution - US Employees Only Profit Sharing Program Competitive parental leave Health, vision, dental, and life insurance, including access to health and wellness programs Actuarial Development Program (ADP) for Actuarial employees taking exams Employee Assistance Program (EAP) Current hybrid working environment Employee Engagement Events and various committees on site to join Wilton Re strives to attract, develop, and retain a diverse workforce. We are committed to providing an inclusive and accessible work environment where all associates feel valued, respected, and supported. Our commitment to inclusivity is reflected in the safeguards, policies, and commitments we have in place to remove barriers and provide equal opportunities to prospective and current associates, without discrimination. A Human Resources representative is available to consult with applicants who require accommodation in the application or recruitment process. Any information shared by the applicant about an accommodation will be treated as confidential. To All Recruitment Agencies: Please do not send any resumes or solicitations regarding open positions to Wilton Re employees unless you have been requested to work on this position or other positions with Wilton Re; please reach out to your main point of contact. Wilton Re is not responsible for any fees related to unsolicited resumes.