MetLife

Sells life insurance and workplace benefits

Assistant Vice President Global Security and Infrastructure - Audit Team

Internal Audit & ControlsConfirmed live in the last 24 hours

Full-timeUnited States

About the Job

Requirements

At least 12 years of experience in IT audit, cybersecurity, technology risk, public accounting, and/or consulting, including proven leadership of technology Internal Audit teams.
Deep, current knowledge of cybersecurity and infrastructure domains, including threat detection and response, identity and access management, vulnerability and third-party risk, cloud and hybrid platforms, networking, resilience, and IT operations.
Experience assessing against standards including NIST CSF/800-53, ISO 27001, CIS, COBIT, ITIL, and SOX.
Demonstrated use of data analytics, automation, and continuous auditing to strengthen coverage and insight.
Working knowledge of AI and agentic AI risks, security use cases, and the governance and controls needed for safe deployment.
Ability to communicate succinctly, influence senior leaders, and constructively challenge without formal authority.
Bachelor’s degree or equivalent experience, preferably in Computer Science, Information Technology, Information Systems, or Accounting.
Professional certification such as CISSP, CISM, CISA, CRISC, CCSP, or CIA.
Strong people leadership, collaboration, judgment, critical thinking, root cause analysis, integrity, and ethics.

Responsibilities

Own the risk assessment, audit plan, execution, issue management, and reporting for Global Security and Global Infrastructure, coordinating coverage with regional and functional audit leaders and teams.
Lead assurance and advisory engagements on emerging cyber, cloud, infrastructure, and AI risks, translating technical exposure into business impact and practical improvements.
Set the global audit roadmap, methodology, and testing approach for cybersecurity and infrastructure; expand the use of analytics, continuous auditing, automation, and AI-enabled tools.
Build trusted relationships with the CISO, CTO, their leadership teams, and first- and second-line risk partners through early, transparent engagement.
Communicate risks, results, and thematic insights to senior technology leaders, Internal Audit leadership, the Audit Committee, and relevant risk committees.
Lead and develop a team of audit professionals, strengthening technical depth, performance, collaboration, and career growth.
Deliver timely, high-quality work across the engagement life cycle, including remediation validation, methodology compliance, and balanced-scorecard management.
Model the company’s success principles and uphold integrity, objectivity, ethics, and professional skepticism.

Desired Qualifications

Experience in global financial services or insurance and familiarity with operational resilience and third-party/ICT risk expectations, including DORA and NYDFS Part 500.
Experience advising on major security or infrastructure transformations and coordinating audit coverage across regions.

The Team You Will Join

As part of Internal Audit at MetLife, you’ll play a critical role protecting MetLife and its stakeholders by delivering both independent, risk-based, and objective assurance through audit execution and providing advice and insights through strategic advisory engagements. Collaborating across the company, you’ll use your strategic problem-solving skills, consulting expertise, and ethical standards to support the company’s growth strategy. Join us at the forefront of the evolving risk landscape to proactively address business imperatives and mitigate emerging risks by developing talent, leveraging new technology, and fostering an innovative culture.

The Opportunity

This position leads Internal Audit’s assurance and advisory coverage for the Global Security (CISO) and Global Infrastructure (CTO) organizations. Scope includes cybersecurity strategy and operations, identity and access management, threat detection and response, third-party cybersecurity risk, cloud and hybrid infrastructure, network and platform engineering, and core IT operations. Leading a team of technology and cybersecurity auditors, you will set the risk-based coverage strategy and serve as a trusted advisor to senior technology leaders.

You will also shape Internal Audit’s response to rapidly evolving AI-enabled threats and controls—assessing whether emerging risks are anticipated and mitigated and whether AI-enabled security and infrastructure capabilities are governed, resilient, and well controlled. Success will be measured by both the assurance delivered and the practical insight provided to management.

Key Responsibilities

Own the risk assessment, audit plan, execution, issue management, and reporting for Global Security and Global Infrastructure, coordinating coverage with regional and functional audit leaders and teams.
Lead assurance and advisory engagements on emerging cyber, cloud, infrastructure, and AI risks, translating technical exposure into business impact and practical improvements.
Set the global audit roadmap, methodology, and testing approach for cybersecurity and infrastructure; expand the use of analytics, continuous auditing, automation, and AI-enabled tools.
Build trusted relationships with the CISO, CTO, their leadership teams, and first- and second-line risk partners through early, transparent engagement.
Communicate risks, results, and thematic insights clearly to senior technology leaders, Internal Audit leadership, the Audit Committee, and relevant risk committees.
Lead and develop a team of audit professionals, strengthening technical depth, performance, collaboration, and career growth.
Deliver timely, high-quality work across the engagement life cycle, including remediation validation, methodology compliance, and balanced-scorecard management.
Model MetLife’s success principles and the highest standards of integrity, objectivity, ethics, and professional skepticism.

Required Qualifications

12+ years of IT audit, cybersecurity, technology risk, and/or public accounting or consulting experience, including proven leadership of technology Internal Audit teams.
Deep, current knowledge of cybersecurity and infrastructure domains, including threat detection and response, identity and access management, vulnerability and third-party risk, cloud and hybrid platforms, networking, resilience, and IT operations, including experience assessing against leading standards such as NIST CSF/800-53, ISO 27001, CIS, COBIT, ITIL, and SOX.
Demonstrated use of data analytics, automation, and continuous auditing to strengthen coverage and insight. Working knowledge of AI and agentic AI risks, security use cases, and the governance and controls needed for safe deployment.
Executive presence and the ability to communicate succinctly, influence senior leaders, and constructively challenge without formal authority.
Strong people leadership, collaboration, judgment, critical thinking, root cause analysis, integrity, and ethics.
Bachelor’s degree or equivalent experience, preferably in Computer Science, Information Technology, Information Systems, or Accounting.
Professional certification such as CISSP, CISM, CISA, CRISC, CCSP, or CIA.

Preferred Qualifications

Experience in global financial services or insurance and familiarity with operational resilience and third-party/ICT risk expectations, including DORA and NYDFS Part 500.
Experience advising on major security or infrastructure transformations and coordinating audit coverage across regions.

Location Expectation: This is a hybrid role requiring a minimum of 3 days per week in office.

The expected salary range for this position is190,000 - 215,000. This role may also be eligible for annual short-term incentive compensation and stock-based long-term incentives. All incentives and benefits are subject to the applicable plan terms.

About the Company

MetLife

Sells life insurance and workplace benefits

MetLife sells life, dental, disability and other insurance, along with annuities and retirement products, to individuals and to employers that offer them as workplace benefits. It is one of the largest US life insurers and a major supplier of group benefits to American employers, with insurance businesses across Asia, Latin America, Europe and the Middle East. Customers pay premiums for coverage, and MetLife invests those funds and also manages money for outside clients through its asset management arm. Its retirement business takes over pension obligations from employers and pays the monthly benefits owed to their retirees. MetLife was founded in 1868 and is based in New York City.

Company size: 10,001+
Company stage: IPO
Headquarters: New York City, New York
Founded: 1868

Recently Posted Jobs

Explore more opportunities at MetLife

See more jobs