Business Information Security Officer

Raymond James; Florida; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life insurance

Critical illness insurance

Disability benefits

Retirement savings

Paid time off

Parental leave

Job summary

Raymond James is seeking a Business Information Security Officer (BISO) for the Private Client Group. The role is hybrid, requiring a minimum of 3 days in an office per week, with a focus on influencing senior leaders to embrace security initiatives.

The BISO will articulate security risks in business terms, ensure regulatory compliance, and lead policy development, audits, and incident response while partnering across IT and business units.

Qualifications

• Formal or informal training in information security and risk management.
• Experience communicating risk to senior leaders and business units.
• Familiarity with regulatory requirements in financial services (GLBA, PCI, HIPAA, etc.).

Responsibilities

• Articulate security perspectives to the business and align with strategy.
• Translate business needs into security requirements for IS orgs.
• Counsel business units on regulatory information security compliance requirements.
• Represent the business in policy and standards development.
• Serve as primary contact for IT audits and coordinate with leadership to close actions.
• Ensure IT owners understand controls and remediation responsibilities.
• Provide enterprise view of vulnerabilities and overall risk posture to business and IS teams.
• Lead process improvements to reduce risk and improve efficiency.
• Investigate security incidents and coordinate corrective actions with security teams.

Skills

Financial services experience

Security risk management

Regulatory compliance

Audit and controls

Incident management

Communication with leadership

Technical policy interpretation

Education

High School (HS) (Required)

Tools

ITIL

COBIT

ISO 17799

Job description

Job Description Summary The Business Information Security Officer (BISO) liaises with our business units and serves as the primary point of contact between Information Security and our business units. Coverage for this opportunity will be with our Private Client Group division. The BISO assists in enabling business strategies, while balancing the security risk and ensuring security is aligned with business strategies. Interacts with all levels of leadership in the firm to accelerate solutions through better communication and alignment. The key to success is the ability to influence senior business leaders about the need to embrace security initiatives. Job Description This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 3 days a week. Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future. Responsibilities: Articulates the security perspective to the business and helps them understand the potential impact and possible controls in business terms Communicates business knowledge and requirements to the Information Security organization thus ensuring security is aligned with business strategy and need Counselsbusiness units in understanding regulatory information security compliance requirements and helps ensure compliance Represents the business unit in development of policies and standards Act as primary point of contact for all IT internal audits, participates in scoping, deliverable requests and collaborates with senior leadership to clear audit reports and ensure action plans are complete and effective EnsuresIT owners are held accountable for their controls and understand responsibilities as to risk mitigation and remediation as well as compliancetosecurity policy and standards to reduce liabilities Understands and reports on the overall information security risk posture of the businessunit, andprovides an enterprise view of vulnerabilities and associated risks to both the business and information security Focuses on process improvement to manage risk, proactively prevent problems and identify opportunities for efficiencies and automation. Investigates security incidents for the business and works with Information Security teams to recommend/implement appropriate corrective actions Understands, tests and implements security plans, products, strategies and control techniques May lead or participate in security related projects and strategy Design and implement disaster recovery and contingency plans to protect company data Help develop procedures for an area of the organization and monitor their implementation Contribute to stakeholder engagement by identifying stakeholders; by finding out their needs, issues, and concerns; and by reacting to these needs, issues, and concerns, arranging meetings and events and drafting supporting materials to promote understanding and commitment Develop own capabilities by participating in assessment and development planning activities as well as formal and informal training and coaching; gain or maintain external professional accreditation, where relevant, to improve performance and fulfill personal potential. Maintain an understanding of relevant technology, external regulation, and industry best practices through ongoing education, attending conferences, and reading specialist media Support strategy formulation for digital by exploring how information technology can be used to help the organization become more responsive to customer needs and changing business requirements Provide specialist advice on the interpretation and application of policies and procedures, resolving queries and issues andreferringvery complex or contentious issues to others Performs other duties and responsibilities as assigned Skills: Financial services experience highly preferred Knowledge of Information Security programsincluding, but not limited to, audit reviews, risk assessment, awareness and training, identity and access management, dataprotections, secure SDLC, incident management, vulnerability assessment, penetration testing, third-party assessment, secure configurations and patch management Advanced knowledge of infrastructure and logical security technology with experience working with ITIL, ISO 17799 and/ orCoBitprocesses and procedures Experience translating business drivers and priorities into security design Knowledge of government and other regulations related to Information Security (e.g., GLBA, SOXA 404, FFIEC, PCI, Privacy, HIPAA, etc.) Technical skills and proficiency in a wide array of platforms and systems (e.g., Windows, UNIX, SQL, Tandem) Uses clear and effective verbal communications skills without supervision and provides technical guidance when required on expressing ideas, requesting actions and formulating plans or policies Works without supervision and provides technical guidance when required on achieving full compliance with applicable rules and regulations in management and/or operations Works without supervision and provides technical guidance when required on maintaining the security, integrity, compliance and continuity of IT systems and services Works without supervision and provides technical guidance when required on developing, monitoring, interpreting and understanding policies and procedures, while making sure they match organizational strategies and objectives Needsguidance (but not supervision) to communicate with other people by speaking in a clear, concise and compelling manner Licenses/Certifications: Security and control certificationshighlypreferred (CISSP, CISM, CISA, CRISC Education High School (HS) (Required) Work Experience General Experience - 3 to 6 years Certifications Travel Less than 25% Workstyle Hybrid The total compensation for this position includes base salary or wages, and may include components such as additional compensation (cash or equity), discretionary bonuses, or commissions. This position is eligible for a benefits package that may include medical, dental, and vision; life insurance; critical illness insurance and accident insurance; disability benefits; retirement savings; paid time off (including vacation, holidays, and sick leave); and parental leave. Eligibility for benefits and specific offerings may vary based on position and employment status. To view more details of the benefits offered, visit Myrjbenefits.com. At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view. We expect our associates at all levels to: • Grow professionally and inspire others to do the same • Work with and through others to achieve desired outcomes • Make prompt, pragmatic choices and act with the client in mind • Take ownership and hold themselves and others accountable for delivering results that matter • Contribute to the continuous evolution of the firm At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs. #LI-TC1 Raymond James is a diversified financial services company providing wealth management, capital markets, asset management, banking and other services to individuals, corporations and municipalities. Founded in 1962 in St. Petersburg, Florida, rather than on Wall Street, we have always embraced being a different kind of financial services firm. Today, Raymond James has locations and subsidiaries across the United States, Canada, the United Kingdom and Germany, and is listed on the New York Stock Exchange under the symbol RJF. Thanks for your interest in working with Raymond James. While we might not have the perfect role for you today, we'd love to keep in touch. Join our Talent Network to stay up to date on career opportunities that may be a good fit for you. Our business is deeply focused on people and their financial well-being. We're committed to helping individuals, corporations and institutions achieve their goals, while also supporting successful professionals and helping our communities prosper. We believe doing well and doing good aren't mutually exclusive. As an established but ever-evolving company, you can start – or continue – growing your career here. We invest in you with wide-ranging benefits and the support of leaders and colleagues who care. From development opportunities and enriching networking groups to prioritizing diversity, inclusion and the power of different perspectives, Raymond James is where good people grow. Our people-first culture is outlined in our Culture Blueprint. Check it out to see why many choose to work at Raymond James – and why they stay.