Director, Technology Exam and Audit Management

Employee Applicant Privacy Notice

Who we are:

Shape a brighter financial future with us.

Together with our members, we’re changing the way people think about and interact with personal finance.

We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The Role

This role is critical to SoFi's evolution as we scale past $50B in assets and navigate heightened prudential standards. The Director will serve to support the primary regulatory interface for all technology and cybersecurity matters, requiring both deep banking regulatory expertise and broad technical knowledge across our full technology estate. The role requires someone who has previously held similar regulatory liaison responsibilities at a complex financial institution and can build credibility with regulators, auditors, and internal technology leaders. The role requires someone who has successfully navigated and delivered on heightened prudential standards requirements at a large, complex financial institution

As the Director, Technology and Cyber Exam and Audit Management, you will be responsible for leading and coordinating regulatory inquiries, responses and interactions for technology and cyber functions at SoFi. This role will report to the Head of Technology and InfoSec Business Controls. You will coordinate interactions, prepare responses, and provide accurate and valid information. You will also act as the central technology liaison with Internal Audit, managing comprehensive audit engagements and coordinating remediation efforts across technology domains.

What You’ll Do

• Serve as the primary liaison with regulatory bodies on Technology and Cyber, managing examination processes, inquiry responses, and ongoing regulatory communications through effective partnership with technology, cybersecurity, risk, and business stakeholders across a complex matrixed organization. 
• Orchestrate preparation for regulatory assessments by coordinating with subject matter experts, reviewing documentation, and ensuring timely submission of required materials. 
• Proactively monitor regulatory developments and adapt organizational strategies accordingly.
• Lead Technology and Cyber Risk assessments, including but not limited to technology infrastructure, application development lifecycle, IT operations, and Data Loss Prevention, recommend mitigation strategies, and collaborate with internal partners to assign ownership, advise on solutions, and drive to closure.
• Oversee audit readiness across diverse technology domains including: cloud infrastructure, SDLC practices, API governance, and cybersecurity controls
• Act as the central Technology and Cyber liaison with Internal Audit functions, facilitating comprehensive audit engagements and control assessments through strong cross-functional relationships and credibility with second and third lines of defense . 
• Foster cohesion and alignment across Technology functions, Information Security, Data Governance, and Insider Threat Programs, ensuring integrated risk management approaches and coordinated responses to regulatory expectations across these interconnected domains
• Lead preparation for internal audit reviews by leading a team, validating control documentation, and ensuring audit readiness across Technology and Cyber teams. 
• Manage the complete audit lifecycle from scoping through remediation, coordinating management responses to audit findings and overseeing timely implementation of corrective action plans with accountability for results. 
• Collaborate closely with audit teams to provide technical expertise during control testing while maintaining independence and objectivity in audit processes.
• Work with team members to ensure risks and processes are properly documented and corresponding controls are designed effectively to address external and internal requirements
• Demonstrate a deep sense of curiosity and willingness to learn and run after problems

 

What You’ll Need

• 10+ years of progressive technology and cybersecurity risk/audit experience within banking or financial services institutions, with at least 5 years at institutions subject to heightened prudential standards (≥$50B assets), including