> Markdown version of [/jobs/ext/4549764-avp-it-assurance-governance](https://www.wearedevelopers.com/jobs/ext/4549764-avp-it-assurance-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Avp, IT Assurance & Governance

- **Company:** Cross River
- **Location:** Fort Lee, NJ, United States
- **Experience:** Expert
- **Salary:** $150,000 - $170,000
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Data Security, Information Technology Audit, IT Management, PCI Data Security Standards, Systems Development Life Cycle, Real-Time Operating Systems, Information Technology
- **Published:** November 3, 2026
- **Apply:** https://www.careerbuilder.com/job-details/avp-it-assurance-governance-fort-lee-nj--1e9eeadd-97bb-4448-8841-e1079911d511

## About the Role

IT Governance, Loans, Finance, Bank Management, Strategic Planning, Regulations, Best Practices, Maintain Compliance, Information/Data Security (InfoSec), Detail Oriented, We are seeking an experienced AVP, Information Security to collaborate across the organization and execute information security governance processes. This hands-on role serves as a subject-matter expert, guiding and monitoring compliance with industry best practices, regulatory guidance, infosec frameworks, and internal policies and standards. The ideal candidate is self-motivated, solutions-oriented, detail-focused, and an independent thinker., Must Have:

 * Exceptional written and verbal communication skills to present complex information clearly to diverse audiences
 * Professional certifications: ISACA CISA or ISC2 CISSP
 * 5+ years of experience in Information Security, IT Security, IT Audit, IT GRC, IT Compliance,IT Assurance, IT Risk, IT Business Analysis, or Business Continuity
 * Strong knowledge of software development life cycle (SDLC), change management, business continuity management, and IT risk management

Preferred:

 * Undergraduate or graduate degree in computer science, cybersecurity, information assurance, business administration, or a closely related field
 * Familiarity with regulatory guidance, standards, and frameworks such as the FFIEC ITHandbook, SOC 1/2, PCI DSS, COBIT 2019, and ITIL
 * Experience working in a highly regulated environment such as financial services, military, or healthcare

## Description

Support select IT assurance and infosec tasks, including:

 * SDLC & Change Management
 * Monitor and report adherence to SDLC and change management procedures
 * Coordinate penetration test vulnerability and EOL asset ticket closure with Infrastructure, Engineering, and Internal Audit
 * Business Continuity Management
 * Maintain and improve Crisis Management, Business Continuity (BCP), and Disaster Recovery Plans (DRP) aligned with industry standards and regulations
 * Conduct Business Impact Analysis (BIA) workshops to identify critical processes, systems,and quantify resilience metrics like RPOs, RTOs, and MTDs
 * Identify, propose, defend, and support implementation of resilience strategies and solutions
 * Design and execute a risk-based multi-year testing calendar
 * IT Risk Monitoring & Reporting
 * Monitor, assess, and report on the effectiveness of selected IT risk metrics
 * Design and implement new risk metrics
 * Privacy Request Fulfillment
 * Execute data-subject rights requests following privacy laws including CCPA and CAN-SPAM
 * IT Assurance
 * Collaborate with cross-functional teams to create or maintain select standards, procedures, and documentation
 * Provide training and awareness across the organization on policies and procedures
 * Collect evidence across IT processes to support audits and examinations
 * Maintain control mappings and perform gap analyses to drive continuous program improvement