Our client a well positioned asset manager is seeking to hire a Business Information Security Officer. This sits in the NYC office 2 days a week. If you are not local to NYC metro please do not apply, no relocation at this time.

OVERVIEW

The mission of our Information Security team is to ensure the development, implementation, and management of a comprehensive program that effectively protects the confidentiality, integrity, and availability of our information assets. Our team is comprised of security professionals with expertise in a diverse portfolio of security disciplines.

RESPONSIBILITIES

• Serve as the primary point of contact and trusted advisor on information security matters for senior business and technology leaders
• Develop and implement a comprehensive information security strategy aligned with business objectives, regulatory requirements, and industry best practices
• Conduct risk assessments and provide recommendations to mitigate security risks and vulnerabilities within the organization
• Collaborate with cross-functional teams to ensure that security controls are implemented and maintained throughout the organization
• Engage with business stakeholders to understand their security needs and requirements and provide guidance on security-related decisions
• Participate in the evaluation and selection of security technologies and solutions to meet organizational needs
• Conduct security awareness and training programs to educate employees on information security best practices and policies
• Oversee incident response activities and ensure timely and effective incident resolution and reporting
• Monitor and analyze security metrics and reports to identify trends, potential threats, and areas for improvement
• Stay up-to-date with emerging security threats, industry trends, and regulatory changes relevant to the financial services sector

REQUIREMENTS

• Proven experience as a Business Information Security Officer or a similar role within the financial services industry
• Deep understanding of information security principles, frameworks, and best practices
• Strong analytical skills with the ability to assess and mitigate complex security risks
• Knowledge of financial industry regulations and requirements
• Familiarity with security technologies, tools, and controls, including network security, application security, identity and access management (IAM), data protection, and incident response
• Understanding of cloud security principles and experience with cloud service providers (e.g., AWS, Azure, GCP)
• Excellent verbal and written communication skills, with the ability to convey complex security concepts to non-technical stakeholders, and leaders
• Strong problem-solving and decision-making abilities, with a focus on balancing security requirements with business objectives
• Knowledge of project management methodologies and experience leading security initiatives
• Ability to work collaboratively in a team-oriented environment and build effective relationships with stakeholders
• Bachelor's degree in Computer Science, Information Security, or a related field
• Commitment to the highest ethical standards

Salary: $220,000-$270,000