Chief Information Security Officer (CISO)
Cais · New York City
About this role
**Chief Information Security Officer (CISO) — CAIS** CAIS is seeking a **Chief Information Security Officer (CISO)** to lead the firm’s cybersecurity program and **Operational Risk Management** practices. This role will set and drive security strategy (including **AI security strategy**), mitigate risks, ensure regulatory compliance, and protect critical financial assets and client data. The CISO will oversee cybersecurity and operational risk functions while staying hands-on with architecture, tooling, and incident response, and will ensure third-party/vendor security aligns with the firm’s risk management framework. --- **Responsibilities** - **Cybersecurity Leadership:** Develop and execute a comprehensive security strategy aligned with **NIST, ISO 27001, and CIS Controls**. - **Risk Management & Threat Intelligence:** Continuously assess cyber threats and vulnerabilities; implement proactive security measures. - **Operational Risk Oversight:** Lead the operational risk management framework across business processes, technology systems, and third-party relationships. - **Regulatory Compliance & Audit:** Ensure compliance with financial industry regulations (e.g., **SEC, FINRA, SOC 2**) and manage audits/certifications. - **Third-Party & Vendor Security:** Evaluate and manage security risks for external partners, vendors, and cloud service providers. - **Incident Response & Crisis Management:** Lead response to security incidents, breaches, and fraud—driving swift resolution and recovery. - **Technology & Infrastructure Security:** Lead secure architecture design, cloud security, endpoint protection, and network security (including design reviews and technical decision-making). - **AI Security Strategy:** Build security policies and governance for AI/ML systems (responsible AI deployment, data integrity, model security, and emerging AI regulations). - **Cybersecurity Operations:** Participate in day-to-day security functions (monitoring, threat hunting, vulnerability management, detection engineering). - **Data Protection & Privacy:** Implement encryption standards, access controls, and data governance. - **Leadership & Collaboration:** Partner with executive leadership and IT teams to align security initiatives with business objectives. - **Employee Education & Awareness:** Develop security training and promote a cybersecurity culture. --- **Qualifications** - Proven track record in **financial services cybersecurity** or another **regulated industry**. - Information security leadership experience with strong hands-on technical background (e.g., security engineering, penetration testing, cloud security architecture, or incident response). - Expertise in risk management, operational risk frameworks, vendor security, cloud security, and encryption protocols. - Strong knowledge of regulatory compliance frameworks affecting financial institutions. - Experience developing **AI security strategies** and governance/risk assessments for AI/ML systems. - **CISSP, CISM, or CISA** preferred. - Excellent communication and leadership skills; ability to influence stakeholders at all levels. - Comfortable operating at the intersection of **strategy and execution**—including presenting to the Board and handling incidents hands-on. --- **Compensation & Benefits** - **Base salary range (New York, NY): $270,000 – $320,000** (final compensation depends on skills, experience, and location). - Market-competitive salary, performance bonus, and excep
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.