Chief Information Security Officer

Ascendo Resources; New York (NY); On-site; USD 190,000 - 270,000; Full time

Benefits offered by this job

401(k) with company matching

Health insurance

Dental insurance

Paid time off

Job summary

Ascendo Resources is seeking an experienced Chief Information Security Officer (CISO) to lead the information security program for a financial services firm in New York. You will develop and execute the cybersecurity strategy, oversee GRC, and drive readiness for SOC 1 and SOC 2 attestations.

The role requires deep financial services knowledge, strong leadership, and the ability to align security with SEC/FINRA regulations while guiding incident response, risk management, and security

Qualifications

• 7+ years of progressive information security experience, including at least 3 years in a leadership capacity.
• Hands-on experience leading or supporting SOC 1 and/or SOC 2 attestation projects.
• Strong background in financial services, capital markets, broker-dealers, clearing firms, or fintech.
• Strong understanding of SEC and FINRA cybersecurity requirements.
• Experience with information security frameworks including NIST CSF, NIST 800-53, and ISO 27001.
• Strong knowledge of cloud security, preferably AWS, as well as IAM, network security, and endpoint protection.
• Experience developing incident response, vulnerability management, and business continuity programs.
• Experience managing third-party security risk and external audits.
• Strong leadership, communication, and stakeholder management skills.
• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent experience.

Responsibilities

• Develop and execute the enterprise information security strategy, governance framework, and cybersecurity roadmap.
• Lead SOC 1 and SOC 2 readiness, attestation, control testing, evidence collection, and remediation efforts.
• Ensure compliance with SEC, FINRA, and applicable NYDFS cybersecurity regulations.
• Establish and maintain security policies, procedures, and risk management frameworks aligned with NIST and ISO 27001.
• Oversee security architecture across AWS cloud and on-premise infrastructure.
• Manage vulnerability assessments, penetration testing, patch management, and incident response programs.
• Oversee identity and access management (IAM), endpoint security, network security, SIEM, and threat detection.
• Develop and maintain business continuity and disaster recovery (BC/DR) programs.
• Lead third-party vendor security assessments and ongoing risk monitoring.
• Partner with Technology, Infrastructure, Compliance, and Legal teams to strengthen security controls.
• Present cybersecurity risks, initiatives, and program updates to executive leadership and the Board.
• Build and manage a security team while promoting security awareness across the organization.

Skills

Leadership

Governance & Risk

SOC 1/2 Attestation

Cloud Security (AWS)

Regulatory Compliance

Incident Response

Education

Bachelor's degree in Computer Science/Info Security

Tools

AWS Cloud

IAM

SIEM

Security Architecture

Job description

We are seeking an experienced Chief Information Security Officer (CISO) to lead the information security program of a financial services firm in New York. This individual will be responsible for developing and executing the firm's cybersecurity strategy, overseeing governance, risk, and compliance (GRC), and leading SOC 1 / SOC 2 attestation efforts while ensuring alignment with SEC and FINRA regulatory requirements.

Key Responsibilities:

• Develop and execute the enterprise information security strategy, governance framework, and cybersecurity roadmap
• Lead SOC 1 and SOC 2 readiness, attestation, control testing, evidence collection, and remediation efforts
• Ensure compliance with SEC, FINRA, and applicable NYDFS cybersecurity regulations
• Establish and maintain security policies, procedures, and risk management frameworks aligned with NIST and ISO 27001
• Oversee security architecture across AWS cloud and on-premise infrastructure
• Manage vulnerability assessments, penetration testing, patch management, and incident response programs
• Oversee identity and access management (IAM), endpoint security, network security, SIEM, and threat detection
• Develop and maintain business continuity and disaster recovery (BC/DR) programs
• Lead third-party vendor security assessments and ongoing risk monitoring
• Partner with Technology, Infrastructure, Compliance, and Legal teams to strengthen security controls
• Present cybersecurity risks, initiatives, and program updates to executive leadership and the Board
• Build and manage a security team while promoting security awareness across the organization

Qualifications:

• 7+ years of progressive information security experience, including at least 3 years in a leadership capacity
• Hands-on experience leading or supporting SOC 1 and/or SOC 2 attestation projects
• Strong background in financial services, capital markets, broker-dealers, clearing firms, or fintech
• Strong understanding of SEC and FINRA cybersecurity requirements
• Experience with information security frameworks including NIST CSF, NIST 800-53, and ISO 27001
• Strong knowledge of cloud security, preferably AWS, as well as IAM, network security, and endpoint protection
• Experience developing incident response, vulnerability management, and business continuity programs
• Experience managing third-party security risk and external audits
• Strong leadership, communication, and stakeholder management skills
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience
• CISSP, CISM, CISA, CRISC, or CCSP certifications preferred
• Prior CISO, Deputy CISO, or senior security leadership experience within a broker-dealer or financial institution preferred
• 401(k) with company matching
• Health and dental insurance
• Paid time off

Equal Opportunity Statement: Ascendo is a certified minority owned staffing firm, and we welcome and celebrate diversity.Ascendo is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, parental status, military service or any other characteristic protected by federal, state or local law.