Director, IT Risk and Controls