Vice President, Head of Business Controls – Technology & Cybersecurity

SoFi Technologies
San Francisco
Full timeUSD 1 - 2 annuallyFunction: Executive & General ManagementExperience: 15+ yearsSkills: ["Executive communication","Leadership","Governance","Risk awareness","Cross-functional collaboration"]

Lead SoFi’s 1LOD Technology & Cybersecurity business controls across SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. Advise CTO/CISO leadership, own enterprise-wide risk programs (Insider Threat, EUC, AI Governance, IT Asset Management), and drive RCSA, control testing, issue remediation, and executive risk reporting. Partner with Compliance, Risk, Audit, and regulators to strengthen the control environment using frameworks like COBIT, NIST, and FFIEC.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
SoFi Technologies
SoFi Technologies
2 days ago

Vice President, Head of Business Controls – Technology & Cybersecurity

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead SoFi’s 1LOD Technology & Cybersecurity business controls across SoFi Bank, Galileo, Technisys, and SoFi Hong Kong. Advise CTO/CISO leadership, own enterprise-wide risk programs (Insider Threat, EUC, AI Governance, IT Asset Management), and drive RCSA, control testing, issue remediation, and executive risk reporting. Partner with Compliance, Risk, Audit, and regulators to strengthen the control environment using frameworks like COBIT, NIST, and FFIEC.
Location: San Francisco
Employment Type: Full time
Job Function: Executive & General Management
Seniority: Sr. Director level

Key Responsibilities

  • •Serve as the primary 1LOD risk partner for Technology and Cybersecurity functions across domestic and international entities.
  • •Own strategy, governance, and execution of enterprise-wide risk programs including Insider Threat, EUC, AI Governance, and ITAM.
  • •Lead large and complex RCSA initiatives, including control testing and remediation strategies for identified gaps.
  • •Create 1LOD risk reporting and trend analysis, advising senior leadership and board committees on the control environment.
  • •Interface with regulators and support internal audits by translating control deficiencies into actionable plans and enhancements to governance practices.

Pay and Benefits

Salary: USD 1 - 2 annually

Key Requirements

  • •15+ years of experience in risk management, information security, or technology risk.
  • •At least 5+ years in a leadership role within a highly regulated financial services environment.
  • •Proven experience managing risk across multiple legal entities and international jurisdictions.
  • •Deep technology and cybersecurity risk subject-matter expertise, including NIST frameworks, FFIEC guidance, cloud security, and SDLC.
  • •Experience building business control functions or risk programs from the ground up (e.g., Insider Threat, EUC).
Experience:15+ yearsFinancial servicesCybersecurityInformation securityTechnology riskHighly regulated
Skills:Executive communicationLeadershipGovernanceRisk awarenessCross-functional collaboration
Certifications:CISACISSPCISMCRISC
Tech Stack:NISTFFIECCOBITSDLCCloud securityRCSAIT Asset Management (ITAM)End User Computing (EUC)Insider ThreatAI Governance

Company Brief

SoFi Technologies
Provides digital financial services including lending, banking, investing, and credit products through a consumer-focused online platform. SoFi serves individuals looking to manage money, borrow, save, invest, and protect their finances in one place.
Industry: Neobanking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn