Chief Information Security Officer (New York City Metropolitan Area)

A global financial institution is seeking a hands-on Chief Information Security Officer to lead the Information Security program for its New York operation.

The role combines executive cybersecurity leadership with direct involvement in cyber risk, regulatory compliance, vulnerability management, remediation, incident readiness, and security governance. The successful candidate will inherit an established program and will be expected to evaluate the current environment, identify opportunities for continued improvement, and strengthen the organization's overall cybersecurity posture.

The CISO will work closely with senior business, risk, and technology leadership as well as a global Head Office security organization. Core architecture and engineering are largely managed globally, while the New York team maintains responsibility for local security oversight, regulatory obligations, risk management, remediation, and security-program leadership.

Responsibilities

• Lead and continuously enhance the Information Security program.
• Conduct cybersecurity risk assessments and identify opportunities to strengthen controls and governance.
• Oversee cybersecurity regulatory compliance and annual certification activities.
• Lead vulnerability-management and remediation oversight.
• Maintain, test, and improve incident-response capabilities.
• Review cybersecurity risk associated with new applications, vendors, systems, integrations, and business initiatives.
• Partner with global security teams on architecture, engineering, shared infrastructure, and local regulatory requirements.
• Lead a small cybersecurity team while remaining personally involved in important security issues.
• Prepare cybersecurity reporting and communicate material risks to senior management.
• Partner with Risk, Audit, Compliance, technology, and business stakeholders.

Role Requirements

• 15+ years of progressive Information Security or cybersecurity experience.
• Experience owning or materially leading an enterprise Information Security program.
• Strong cybersecurity risk, governance, vulnerability-management, and remediation experience.
• Hands-on understanding of enterprise security controls and infrastructure.
• Experience operating within a regulated environment.
• Strong incident-response and cybersecurity-risk-assessment experience.
• Executive-level written and verbal communication skills.
• Ability to work effectively with regulators, auditors, executives, risk organizations, and technical teams.
• Bachelor's degree or equivalent in a relevant technical or security discipline.
• Ability to work onsite in New York City four days per week.

Nice to Have

• Banking or foreign banking organization experience.
• CISSP, CISM, CCISO, CISA, or equivalent certification.
• Master's degree.
• Experience operating within a global security organization.
• AI-security governance exposure.