VP, IT Governance Risk and Compliance

VP, IT Governance, Risk

& Compliance

Full-Time

Norwalk,

CT

About

the Company:

Wilton

• Re is an industry leader in the life (re)insurance space, specializing in the
• acquisition of in force life insurance and annuities. We are experienced
• industry specialists focused on the risk, capital, and operational needs of our
• clients’ businesses. We provide our clients with the services they need from in
• force transactions and product development to underwriting and new business
• strategies.

Wilton

Re has the resources and expertise to pursue and successfully manage the

largest life and annuity transactions in the company.

Position Summary

The

• Vice President, IT Governance, Risk & Compliance is accountable for the
• governance, oversight, monitoring, reporting, and continuous improvement of
• Wilton Re’s IT control environment. The role centralizes IT governance,
• regulatory compliance readiness, audit management, control monitoring, policy
• governance, and control effectiveness reporting under one senior leader.

The VP

• ensures IT controls are clearly defined, assigned, monitored, tested,
• evidenced, remediated, and reported in alignment with regulatory requirements,
• industry frameworks, and business objectives. Maintains a unified IT control
• framework aligned with NIST Cybersecurity Framework, NYDFS 23 NYCRR Part 500,
• IT General Controls, ICFR requirements, SOC reporting expectations, and
• relevant third-party assurance standards.

This

• leader partners closely with IT, Legal, Compliance, Finance, Risk Management,
• Internal Audit, business leaders, auditors, regulators, and third-party service
• providers. The role provides periodic reporting to executive leadership,
• governance committees, Audit Committee, and Board stakeholders regarding
• control effectiveness, risk posture, remediation status, and compliance
• readiness.

Role Responsibilities

Governance, Risk &

Controls

• Own Wilton Re’s IT control framework
• across operational, regulatory, cybersecurity, and financial reporting
• control domains.
• Establish control ownership,
• accountability, evidence requirements, monitoring cadence, issue
• management, and reporting structures across IT.
• Coordinate across first-line control
• owners, second-line risk and compliance functions, and Internal Audit to
• maintain clear accountability and effective governance.

Regulatory Compliance &

IT Audit Response

• Maintain readiness for regulatory
• examinations, audits, and compliance reviews, including NYDFS
• cybersecurity requirements and relevant insurance or financial services
• obligations.
• Coordinate responses to auditors,
• regulators, and examiners, ensuring responses are complete, timely,
• consistent, and supported by appropriate evidence.
• Manage audit findings, corrective
• actions, control deficiencies, certifications, attestations, management
• representations, and remediation activities through closure.
• Control Monitoring,

Evidence & Reporting

• Establish control monitoring and
• testing programs, including scope, frequency, performers, reviewers,
• evidence, exceptions, and remediation status.
• Develop dashboards, metrics, and
• reporting for executive leadership, governance committees, Audit
• Committee, and Board stakeholders.
• Establish standards for audit
• evidence management, retention, traceability, accessibility, and quality
• review.

Policy Governance

• Manage the lifecycle of IT policies,
• standards, and procedures, including creation, review, approval,
• publication, evidence, and retirement.
• Ensure policies are maintained in
• accordance with governance requirements and material change
• expectations.
• Monitor policy compliance and
• translate regulatory change and audit expectations into practical IT
• policy, standard, and procedure updates.

Leadership

• Lead and develop a small team
• responsible for day-to-day control operations, reporting, and continuous
• improvement.
• Foster a culture of accountability,
• transparency, evidence discipline, and risk-based decision
• making.
• Drive automation and process
• improvements to improve governance effectiveness and reduce control burden
• across IT.

Basic

Qualifications

• Minimum 10 years of progressive experience in IT governance, risk
• management, cyber security, regulatory compliance, audit, controls,
• third-party risk management, or related disciplines.
• Experience within insurance, reinsurance, financial services firms
• or work at audit firms or regulators is highly preferred.
• Demonstrated success managing audits, regulatory examinations,
• control programs, evidence requests, remediation initiatives, and control
• framework maturity.
• Strong understanding of IT General Controls, ICFR/SOX concepts,
• audit practices, SOC reporting, NIST Cybersecurity Framework, NYDFS 23
• NYCRR Part 500, and third-party risk management.
• Proven ability to influence senior leaders and work effectively
• across business, technology, risk, compliance, finance, legal, and audit
• functions.
• Bachelor's degree required.
• MBA, Master of Information Systems, Master of Cybersecurity, Master
• of Enterprise Risk Management, or comparable advanced degree
• preferred.
• Strong knowledge of governance frameworks, regulatory compliance practices, audit methodology, control testing, issue management, and evidence standards.
• Strong matrix management and influencing skills.
• Excellent communication, stakeholder management, executive presentation, and Board-level reporting skills.
• Experience with workflow management, dashboards, and control automation solutions preferred.
• Ability to translate regulatory and audit expectations into pragmatic, sustainable operating practices.

Required Education /

Certifications

• Bachelor's degree required in Information
• Systems, Cybersecurity, Risk Management, Accounting, Finance, Business
• Administration, or a related discipline. MBA or relevant advanced degree
• preferred.
• One or more professional certifications
• strongly preferred, including CISA, CRISC, CGEIT, CISSP, CISM, CIA, or
• equivalent credentials demonstrating expertise in governance, risk, compliance,
• audit, cybersecurity, or third-party risk management.

Pay/Location

Norwalk, CT

Hybrid Structure

• Minimal to no travel required
• Base salary/hourly rate range for this
• position in Connecticut is between $170,000 and $ 210,000 Please note that
• specific compensation decisions are based upon a variety of job-related factors
• as permitted by law, including geographic location, credentials, skills,
• education, training, and experience.
• Base salary is just
• one component of Wilton Re’s total compensation package for employees.
• Additional compensation includes annual performance-based bonus, 401K with
• employer contribution, and profit-sharing program. Employee may also be
• eligible for long-term incentives. All incentives and benefits are subject to
• the applicable plan terms.

What We Offer

Competitive vacation and sick time, including company-paid holidays, floating holidays and early closing days

401(k) plan with employer contribution - US Employees Only

Profit Sharing Program

• Competitive parental leave
• Health, vision, dental, and life insurance, including access to health and wellness programs
• Actuarial Development Program (ADP) for Actuarial employees taking exams

Employee Assistance Program (EAP)

• Current hybrid working environment
• Employee Engagement Events and various committees on site to join
• Wilton Re strives to attract, develop,
• and retain a diverse workforce. We are committed to providing an inclusive and
• accessible work environment where all associates feel valued, respected, and
• supported. Our commitment to inclusivity is reflected in the safeguards,
• policies, and commitments we have in place to remove barriers and provide equal
• opportunities to prospective and current associates, without discrimination. A
• Human Resources representative is available to consult with applicants who
• require accommodation in the application or recruitment process. Any
• information shared by the applicant about an accommodation will be treated as
• confidential.

To All

• Recruitment Agencies: Please do not send any
• resumes or solicitations regarding open positions to Wilton Re employees unless
• you have been requested to work on this position or other positions with Wilton
• Re; please reach out to your main point of contact. Wilton Re is not responsible
• for any fees related to unsolicited resumes.