Americas Regional CISO & Global Head of Security Engineering

RED SKY Consulting; New York (NY); Hybrid; USD 250,000 - 400,000; Full time

Job summary

RED SKY Consulting is seeking an Americas Regional CISO & Global Head of Security Engineering to drive security strategy and operations across the Americas and global engineering efforts. This executive role reports to the Group CISO and requires collaboration with IT, risk, and business leaders.

The position combines regional security leadership with global engineering oversight, including automation, cloud and network security, and innovation initiatives across multiple regions.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Master's degree preferred.
• CISSP or CISM certification required.
• GIAC/CEH/OSCP or equivalent certifications valued.
• 15+ years leadership in global organizations.
• 10+ years in information security with leadership and engineering experience.

Responsibilities

• Lead global security engineering strategy and hub across regions.
• Partner with CTO, IT, legal, compliance to align security programs.
• Oversee Americas security operations, risk, and regulatory compliance.
• Drive security engineering innovation including AI/ML.
• Develop DevSecOps practices and SDLC governance.
• Oversee budget planning for global security engineering.

Skills

Executive leadership

Global security program leadership

Stakeholder management

Matrix leadership experience

Security governance & risk

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree preferred

CISSP or CISM required

GIAC/CEH/OSCP certs valued

Tools

ISO 27001

NIST

OWASP

MITRE ATT&CK

Security automation tooling

Job description

Job Title: Americas Regional CISO & Global Head of Security Engineering

Location: Hybrid Onsite in NY 2x/week

Type: Direct Hire

Bottom Line / In a Nutshell:

• Executive Cyber Leadership (Regional CISO Experience): Proven experience operating as a regional CISO or equivalent in large, global financial institutions; adept at executing global security strategies within a regional context without divergence.
• Global Matrix Stakeholder Leadership: Demonstrated ability to influence and collaborate across IT (CTO/infrastructure), application development, BC/DR, corporate/physical security, legal, compliance, and business lines, driving outcomes without direct budget control.
• Security R&D and Innovation Leadership: Experience building and leading a global security R&D/innovation function; establishing strategy, metrics, and reporting; partnering with business and strategy teams to evaluate startups, investments, and innovation that enable revenue.
• Trust, Transparency, and Cultural Agility: High-integrity communicator who is transparent, non-rigid, and effective across US–Japan–UK–India cultural and time-zone divides; strong team motivator and relationship builder.
• Financial Services Domain Expertise: Deep familiarity with global investment banking and asset management security requirements, regulatory environments, and large-scale enterprise security operating models.

Job Description:

This dual-function role combines regional CISO responsibilities for the Americas with global leadership of our Security Engineering function. Reporting directly to the Group CISO, you will serve as a senior member of the Global Information Security Leadership team whilst overseeing all information security operations for the Americas region. This position requires managing regional security operations, risk management, and regulatory compliance whilst simultaneously leading the development and execution of security engineering strategy and managing global security engineering operations, technology implementation, and security tooling across all regions including Japan, Americas, EMEA, India, and Asia Excluding Japan (AeJ).

Global Head of Security Engineering Responsibilities

Strategic Leadership: Develop and execute a global cyber security engineering strategy and framework that aligns with business objectives and the Security Risks and Controls Framework. Build, mentor, and manage a high-performing global team of cyber security engineers across all regions. Foster a culture of continuous improvement, innovation, and collaboration within the team. Lead budget planning and resource allocation for global security engineering activities.

Change Leadership: Serve as a strong change agent in transforming how we deliver security engineering services and manage security platforms. Drive the adoption of modern operating models, automation, and emerging technologies including artificial intelligence and machine learning to improve efficiency, scalability, responsiveness, and the overall effectiveness of security controls.

Security Engineering & Implementation: Develop and maintain security solutions and products for the information security team, ensuring alignment with enterprise technology standards. Define and implement security standards, best practices, and guidelines for technology infrastructure, applications, and systems globally. Lead design and implementation of secure network solutions, cloud security solutions, and endpoint protection mechanisms including security tooling management (change management, patching, upgrades).

Global Infrastructure: Support the establishment of a Security Engineering Hub in our India-based delivery centre to provide 24x7 engineering support for Japan and global security platforms.

Technology Evaluation & Selection: Collaborate with cross-functional teams to evaluate and select security technologies including AI/ML, SaaS, security automation, and R&D initiatives. Provide technical guidance and expertise on security infrastructure design, configuration, and deployment across all regions. Provide clarity to IT (including projects) to ensure the most optimal risk reduction solutions are implemented.

Security Controls & Protection: Design and implement security controls and measures to protect against cyber threats, malware, and unauthorized access. Lead relevant assessments to identify gaps, vulnerabilities, and areas for resilience improvement.

DevSecOps & SDLC: Develop secure software development life cycle (SDLC) practices and implement DevSecOps program for the company globally.

Innovation & Testing: Establish and manage security lab and sandbox for evaluating security solutions and testing emerging technologies for the business. Stay current on emerging technologies, trends, and threats in the field of information security engineering.

Stakeholder Collaboration: Collaborate with internal and external stakeholders to ensure alignment with industry standards, regulatory requirements, and compliance frameworks. Partner with regional CISOs and security leaders to understand and address region-specific security engineering requirements. Work closely with IT, business units, legal, HR, and compliance teams to integrate security engineering solutions into business operations.

Resourcing & Coverage: Establish resourcing plans to build strong security engineering capabilities across key regions to support regional business, IT, and business development needs.

Leadership & People Management

Adhere to and promote company values and ethical framework across global and regional teams. Lead environment where people management and development is top priority, empowering and mentoring direct reports. Drive achievement of high performance through effective career management, succession planning, and talent management. Act as role model communicating SMART business-driven objectives and ensuring continuous performance reviews. Proactively manage people decisions aligning performance with organizational needs. Provide regional and global perspective on talent, skills, development, promotion, and compensation. Contribute to year-end compensation process, hiring, retention, promotion, and disciplinary actions.

Required Qualifications

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field
• Master's degree preferred
• CISSP or CISM certification required
• Additional certifications valued: GIAC certifications, CEH, OSCP, or other relevant cybersecurity certifications.

Experience

• Minimum 15+ years of leadership experience in large, complex, global organizations
• Minimum 10 years in information security with demonstrated experience in both operational security leadership and security engineering
• Demonstrated executive experience leading relevant business of similar size and complexity across multiple locations
• Experience with matrix organization leadership and non-staff resource allocation
• Experience managing technical security engineering functions globally
• Broad experience across business and infrastructure disciplines including regulatory interaction, audit facilitation, and technology service delivery
• Experience working with US financial services regulators (SEC, FINRA, Federal Reserve)

Technical & Strategic Skills

• Strong knowledge of security technologies, protocols, and frameworks (ISO 27001, NIST, OWASP, MITRE ATT&CK)
• Experience with designing and implementing security controls for cloud environments, network infrastructure, data security, and software applications
• Strategic and operational understanding of risk frameworks, security engineering frameworks, and regional security best practices
• Deep technical expertise in security tooling, automation, and emerging technologies
• Strong understanding of US regulatory landscape for financial services cybersecurity

Core Competencies

• Excellent analytical, problem-solving, and project management skills
• Strong communication and interpersonal skills for diverse stakeholder collaboration
• Ability to translate complex technical security concepts into business risks and business cases
• Ability to communicate with knowledge and credibility to all management levels including management committees and board-level presentations
• Demonstrated ability to develop strong relationships with regional external oversight and regulators
• Ability to lead and mentor teams of security engineers in a global environment
• Proven ability to manage complex change agendas and driving strategy formulation and service delivery
• Right to work in the United States
• Ability to collaborate with internal and external stakeholders ensuring alignment with industry standards and regulatory requirements
• Willingness to travel internationally to support global teams and regional operations