Chief Information Security Officer

The TCW Group, Inc.; City of Niagara Falls (NY); Presencial; USD 275.000 - 400.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical benefits

Retirement benefits

Paid time off

Descripción de la vacante

The Chief Information Security Officer (CISO) at The TCW Group, Inc. will lead the Information Security team, shaping and maintaining the program across security disciplines while acting as a key incident response decision-maker.

The role blends hands-on monitoring with strategic risk management, requiring clear communication with business and technology stakeholders at all levels. A minimum of ten years in information security and seven in leadership is expected.

Formación

• Bachelor's degree or equivalent work experience in a related field.
• Minimum of ten years in information security, with at least seven years in a senior leadership role.
• Advanced knowledge of security practices including vulnerability/patch management, incident response, and endpoint protection.
• Familiarity with NIST CSF, ISO 27001, SOC 2 Type II and related frameworks.
• Strong security foundations across architecture, threat modeling, vulnerabilities, and cloud security.

Responsabilidades

• Improve and develop security processes and technology platform strategies.
• Plan and execute the company's information security strategy.
• Oversee day-to-day operation and monitoring of security controls.
• Design and implement cloud and application security programs.
• Partner with stakeholders when onboarding solutions to ensure adequate controls are available and enabled.
• Drive remediation and reporting of vulnerabilities.
• Lead incident response as Incident Commander and coordinate with stakeholders.
• Automate security operations to improve detection and response capabilities.
• Develop training plans and mentorship to grow internal capabilities.
• Monitor threat landscape and advise on appropriate actions.
• Ensure alignment with NIST CSF 2.0 maturity targets.
• Manage information security risk and regulatory compliance.
• Implement continuous monitoring and report changes to control owners.
• Share best practices with peer organizations to strengthen the security program.
• Promote secure design patterns within agile software development.

Conocimientos

Communication

Leadership

Strategic thinking

Team management

Security architecture

Threat modeling

Educación

Bachelor's degree in Computer Science or related field

Descripción del empleo

Position Summary

The Chief Information Security Officer (CISO) will report to the Head of Engineering Solutions to oversee the day-to-day operations of the Information Security team at TCW. The individual in this position will oversee the development, implementation, and maintainence of the functions of the Information Security Program, and serve as a member of the incident response team. Ideal candidate must have deep knowledge in essential security practices, with practitioner experience across multiple security disciplines, and experience managing and developing teams. This is a hands‑on role where monitoring security controls and developing and improving security strategies will be some of the key responsibilities of this position, allowing the candidate to blend their practitioner experience and strategic mindset to innovate. Ability to communicate effectively across the business and technology at all levels in the organization is required.

Location

US-NY-New York

Contract and Working Hours

Regular Full-Time

Essential Duties

• Improve and develop security processes and technology platform strategies
• Plan and execute the company's information security strategy
• Day to day operation and monitoring of security controls
• Design and implement a robust cloud and application security program
• Partner with stakeholders when onboarding solutions to ensure adequate controls are available and enabled
• Drive remediation and reporting of vulnerabilities
• Selection and implementation of appropriate technology solutions
• Serve as the Incident Commander responsible for leading and coordinating the response to all incidents where appropriate
• Automate security operations to improve detection and response capabilities
• Develop training plans and mentorship opportunities to promote internal capabilities
• Monitor threat landscape for emerging threats and advise stakeholders on appropriate courses of action
• Ensure alignment with NIST CSF 2.0 maturity targets
• Manage information security risk and maintain compliance with applicable regulatory requirements
• Implement a continuous monitoring strategy to identify and respond to changes to the company's risk posture and communicate to control owners
• Collaborate with peer organizations to share best practices with an eye on further strengthening and evolving the firm's information security program
• Influence the adoption of secure design patterns with a mission to embed security into the fabric of the company through an agile software development process.
• Adopt a security advisory mindset, providing subject matter expertise to the firm's internal stakeholders; advise and execute on the Company's security strategy
• Lead data protection initiatives to ensure the confidentiality, integrity, and availability of company and customer information

Required Qualifications

• Bachelor's Degree in Computer Science or a related field, or equivalent work experience
• Minimum of ten years of experience in the information security industry, with a minimum of seven years in a senior leadership role directly supervising staff
• Advanced knowledge of essential security practices, such as vulnerability and patch management, incident response, and endpoint protection
• Familiarity with industry frameworks such as NIST CSF, ISO 27001, SOC 2 Type II, etc.
• Strong technical foundation, including security architecture, threat modeling, vulnerability assessments, and cloud security

Professional Skills Qualifications

• Strong communication skills: This role must communicate with various stakeholders including business leaders, clients, team members, engineers, regulators, and legal counsel
• Strategic problem-solving and decision‑making abilities
• Strong leadership and interpersonal skills

Desired Qualifications

• Experience working in the financial services industry

Estimated Compensation

Base Salary: For the NY based positions, the base salary range is $275k to $400k. This is an anticipated range only.

Other Compensation and Benefits: In addition to base salary, employees are eligible for a discretionary bonus and a comprehensive benefits package designed to support you and your family, invest in your health and wellbeing, and help build long‑term financial security. Benefits include medical, dental, and vision coverage, retirement benefits, and paid time off. These benefits reflect our commitment to supporting the health, wellbeing, and long‑term financial security of our employees and their families.