Business Information Security Officer-AVP
Core
Provides cyber risk advisory services to strengthen the firm's defensive cybersecurity posture through proactive risk management, control oversight, and security-by-design practices.
Role type
Senior IC Cyber Risk Advisor
Builds
Risk-informed decisions and measurable reductions in cyber exposure for technology, infrastructure, application, and business teams.
Domain
Financial Services / Cybersecurity
Required skills
Enterprise networking concepts, network security technologies, secure cloud, Secure SDLC, SaaS security (Identity, Data Protection, Monitoring, Governance), architecture diagram review, cyber risk assessment, control evaluation, remediation tracking, regulatory framework knowledge (FFIEC, NIST, ISO, SOC), audit support, executive communication.
Preferred skills
Experience in regulated financial services, exposure to regulatory expectations, ability to influence without direct authority.
Technologies
Cloud platforms, SaaS, Network security tools, Threat intelligence platforms, Vulnerability management tools.
Responsibilities
Assess cyber risks for infrastructure, applications, cloud services, and third-party supply chains; Review network designs and architecture artifacts for security risk; Provide guidance on risk acceptance and exception handling; Partner with engineering teams to embed security-by-design principles; Prioritize vulnerability remediation based on risk; Lead network security risk assessments and control gap analysis; Provide advisory support during cyber incidents and threat events.
Seniority
AVP (Associate Vice President), Senior leadership level
