Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
Responsibilities
Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
Translate technical and regulatory requirements into pragmatic policies, standards, architectures, and operating procedures tailored to the client’s risk appetite.
Design and implement security controls aligned to frameworks such as ISO/IEC 27001, NIST CSF, CIS Controls, and industry regulations (e.g., FINMA circulars, DORA, NIS2).
Support clients in maturing capabilities across cloud security, identity and access management, data security (encryption, DLP), vulnerability and threat management, security monitoring, and incident response.
Assess third-party and supply chain cyber risk, define remediation plans, and help establish continuous assurance and vendor oversight processes.
The AVP serves as the primary Federal Government Affairs partner to MetLife’s Retirement and Income Solutions (RIS) and owns the company's federal technology policy agenda spanning AI, data privacy, and cybersecurity.
Compensation
The expected salary range for U.S. is 164,200 - 218,900.
Responsibilities
Lead federal advocacy for Retirement & Income Solutions.
Serve as the primary Federal Government Affairs partner to RIS and its senior leadership team.
Own MetLife's federal technology policy agenda across AI, data privacy and cybersecurity.
Build and align MetLife advocacy positions by working with Communications, Legal, Regulatory Policy, and Risk teams.
Develop and execute federal advocacy strategy, including engagement with Senate HELP and House Education and Workforce Committees.
Requirements
Bachelor's degree
Nice to have: Experience working directly for a Member of Congress or a congressional committee
Nice to have: Corporate government affairs experience
Responsible for oversight and administration of operational and regulatory risk strategy programs for a business segment, focusing on identity and access management and cybersecurity.
Responsibilities
Evaluate effectiveness of controls and escalation
Lead risk identification, assessment, and challenge across IAM
Manage governance of issues through lifecycle
Execute risk assessments against defined scopes
Support and execute RCSA, Exception Management, and governance groups