VP, Corporate Systems SOX and PCI Compliance

We need someone to live around or move to Los Angeles, NY/NJ, Houston, or Charlotte area.

Who we are

At Corebridge Financial, Action is Everything. We are a new company, but not a new business. Formerly AIG Life & Retirement, we are one of the largest and most established providers of retirement solutions and insurance products in the United States, with a long and proven track record of serving our clients. Everyday, we proudly partner with financial professionals and institutions to make it possible for more people to take action in their financial lives, for today and tomorrow.

About the role

What you need to know:

The TRC VP of Corporate Systems SOX and PCI Compliance will be responsible for several critical initiatives, including the following:

• Act as the audit interface to manage scope, quality of responses, and interactions with internal and external auditors/regulators.
• Implement and oversee controls relating to the programs that are formally defined to address Internal Controls over Financial reporting (SOX) for IT supporting Corporate Functions.
• Work with Technology teams, specifically within the Corporate Functions business unit, to ensure adequate preparation for upcoming audits and exams.
• This role is responsible for maintaining and managing the Process, Risk, and Controls (PRC) library.
• Ensure ownership and management of program controls and compliance mandates.
• Enhance key IT processes and controls environment to ensure that Corebridge is meeting all internal standards and external audit requirements.
• Manage and prioritize control issue remediation processes to ensure that the underlying risk to the organization is being managed. Ensure timely remediation of issues.
• Effectively perform deficiency evaluation, understanding mitigating controls to determine risk aggregation.
• Perform controls testing and monitoring on a regular basis. Manage control testing scope.
• Record and report the current state of SOX and SOC risk.
• In addition, this lead will support the Corebridge Payment Card Industry (PCI) program. The candidate should be familiar with the PCI security standards (network security, access controls, data encryption, etc.) and will perform ongoing assessments of the environment to comply with PCI DSS requirements and lead the preparation of the annual PCI Compliance Report.

What we’re looking for:

Experience:

• 10+ years of experience within technology risk, control and governance, Internal Audit or SOX disciplines with increasing responsibility and work complexity to include progressive management roles in large, complex organizations.
• Strong technical experience over key controls in SAP environments and IT Controls supporting Corporate Functions (e.g. Treasury, Finance).
• Experience managing a team of risk professionals.
• Industry certifications including PCI compliance certification preferred.
• Public Accounting experience preferred.
• Required: Bachelor’s degree.

Technology Risk & Controls Skills:

• Strong expertise in SOX, including 10+ years working on SOX related projects.
• Understanding of IT Audit principles and control frameworks (COBIT, NIST).
• Ability to oversee multiple processes, action plans and key stakeholders simultaneously.
• Experience raising awareness of issues to key stakeholders across technology.
• Ability to facilitate and drive management support throughout the external audit life cycle.
• Experience designing, maintaining, and managing a controls library.
• Experience supporting PCI requirements and associated audit activities.

Core skills

• Demonstrate effective leadership skills.
• Drives for results — shows urgency and takes initiative, doesn’t let problem situations linger, and ensures service excellence and efficiency objectives are met.
• Executes through the team — manages to high standards, empowers others, and holds them accountable while actively engaging and inspiring them at the same time.
• Manages competing priorities — agility to manage competing, changing and sometimes conflicting priorities.
• Utilizes strong negotiation and influencing skills to align interests across diverse constituencies, including internal and external partners.
• Proven track record of drawing conclusions, making decisions, and using data to solve problems.
• Ability to work under pressure and meet tight deadlines.
• Ability to set priorities and complete assignments on time.
• Ability to analyze, organize and prioritize work while meeting multiple deadlines.
• Experience leading complex, major change initiatives; demonstrated skills in change management.
• Ability to define solutions from