Chief Information Security Office-Strategy, Programs & GRC AVP

Bank of China USA; New York (NY); On-site; USD 65,000 - 150,000; Full time

Job summary

A leading financial institution is seeking a Chief Information Security Office-Strategy, Programs & GRC AVP to enhance its information security framework. The role involves establishing governance and compliance, coordinating risk management strategies, and leading project management initiatives in line with the bank's objectives. Candidates should possess a bachelor's degree along with extensive experience in risk management and information security.

Qualifications

• 5 years in Financial services Risk Management or Audit required.
• 3 years of experience in IT/IS Risk programs development and execution.
• 1 year experience with US Banking Regulations desired.

Responsibilities

• Establish and maintain Information Security policies and procedures.
• Conduct risk assessments and develop risk identification plans.
• Coordinate Information Security strategy and maintain initiatives tracking.

Skills

Risk Management

Governance

Project Management

Compliance

Information Security

Education

Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, or related field

Job description

Chief Information Security Office-Strategy, Programs & GRC AVP

Join to apply for the Chief Information Security Office-Strategy, Programs & GRC AVP role at Bank of China USA

Chief Information Security Office-Strategy, Programs & GRC AVP

1 week ago Be among the first 25 applicants

Join to apply for the Chief Information Security Office-Strategy, Programs & GRC AVP role at Bank of China USA

Get AI-powered advice on this job and more exclusive features.

Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or our Trade Services, Commodities, Financial Institutions and Global Markets lines of business.

Overview

This incumbent will provide Strategy, Programs, Governance, Risk and Compliance functions as required to fulfill BOCNY information security program requirements. This incumbent will provide Strategy Coordination, CISO Projects Management, Training & Culture, Metrics & Reporting, Governance, Risk Assessments and Compliance functions as detailed below.

Responsibilities

Governance

• Establish and maintain Information Security policies and procedures
• Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines
• Periodically refresh and update TISR controls guidance in relevant policies and supporting procedures with detailed implementation guidance
• Develop, monitor, and track CISO policy adherence measures and metrics
  
  

Stragtegy & Programs

• Coordinate Information Security strategy in alignment with the Bank's strategy
• Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives
• Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary
• Provide end-to-end project management function for all CISO led projects
• Manage all CISO programs, including but not limited to: Information Security Program & Training & Culture Program
  
  

Risk & Compliance

• Establish and enhance a TISR framework that consists of the appropriate components to effectively manage TISR
• Conduct risk assessments of TISR for Projects, Third-Party, New Activities and Applications
• Develop and execute an TISR annual work plan of risk identification, assessment, and control evaluation and testing activities
• Review and contribute to the development and maintenance of the taxonomy for Risk, Process and Controls for TISR domains.
• Catalog and oversee remediation of TISR issues include those arising from Audit and Regulatory exams, ITRM deep dives, root cause analyses and control testing
• Prepare and submit Audit Requests for evidence
• Anticipate audit requests and prepare comprehensive approach to for CISO policy and standards and associated implementation
• Prepare response evidence for IT/IS related regulatory exams
• Recommend changes to policy, process or procedures to align with OCC and other federal guidelines and regulations
• Evaluate and provide evidence of compliance for BOCNY Branch
• Liaison with LCD/RAO/IAD to ensure collaboration and partnership so that CISO can meet regulatory IT/IS requirements
  
  

Metrics & Reporting

• Manage all metrics and reporting for CISO
  
  

Qualifications

• Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required
• Minimum 5 years of work experience in Financial services Risk Management, Audit, IT/IS Operations, or other relevant functions
• Minimum 3 years of experience in d eveloping and executing IT/IS Risk programs, projects, and policies
• Minimum 1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks
• Strong program, frameworks, project management development, implementation, and maintenance skills
• Sound and practical IT/IS risk management and program knowledge
• Familiarity with IT/IS Risk Management regulations, standards, and frameworks including NIST, ISO27002, FFIEC Guidelines, etc.
• CISSP/CRISC/ or IT related certifications preferred
  
  

Pay Range

Actual salary is commensurate with candidate’s relevant years of experience, skillset, education and other qualifications.

USD $65,000.00 - USD $150,000.00 /Yr.

Seniority level

• Seniority level

  Executive

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Banking

Referrals increase your chances of interviewing at Bank of China USA by 2x

Get notified about new Head of Information Security jobs in New York, NY.

Brooklyn, NY $184,000.00-$240,000.00 5 days ago

New York City Metropolitan Area $190,000.00-$215,000.00 1 week ago

New York City Metropolitan Area $240,000.00-$280,000.00 2 weeks ago

New York, NY $200,000.00-$240,000.00 1 day ago

Montvale, NJ $150,000.00-$180,000.00 1 week ago

New York, NY $190,000.00-$240,000.00 2 days ago

Director - Risk and Information Security

New York, NY $170,000.00-$255,000.00 1 week ago

New York, NY $110,000.00-$230,000.00 5 days ago

New York, NY $236,000.00-$265,499.00 2 weeks ago

Head of Enterprise Information Protection - Director

Head of Product, Information Security and Identity

Director of Cybersecurity and Networking

AVP, Information Security – Strategy, Programs, and GRC

New York City Metropolitan Area $100,000.00-$150,000.00 1 month ago

Associate / AVP, Information Security / IT Risk

New York City Metropolitan Area 2 weeks ago

Managing Director, Investment Banking - Cybersecurity & Software

New York, NY $140,000.00-$160,000.00 1 day ago

Director, First Line Technology Controls Testing and Monitoring,

New York, NY $175,000.00-$225,000.00 2 weeks ago

New York, NY $100,000.00-$145,000.00 1 week ago

Brooklyn, NY $107,986.00-$107,986.00 2 weeks ago

Senior Manager, U.S. Information Security & Control

Cybersecurity Associate Director - IAM Access Operations

Middletown, NJ $155,400.00-$261,100.00 2 weeks ago

Director, Cybersecurity and Technology Risk

Director, Cybersecurity and Technology Risk

Managing Director, Private Equity Cybersecurity| Forensic & Litigation Consulting

New York, NY $294,500.00-$500,000.00 6 days ago

New York, NY $140,000.00-$170,000.00 7 hours ago

New York, NY $150,000.00-$190,000.00 2 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.