Chief Information Security & Privacy Officer

Smith & Wilkinson; Atlanta (GA); On-site; USD 180,000 - 240,000; Full time

Job summary

Smith & Wilkinson seeks a Chief Information Security & Privacy Officer to lead enterprise cybersecurity, privacy, technology risk, and resilience for a leading financial services client. This executive will shape strategy, governance, incident response, privacy programs, and risk management while balancing security with innovation and business needs.

Ideal candidates bring 8+ years in cybersecurity/privacy/tech risk, with 5+ years in leadership within banking/insurance, and experience presenting

Qualifications

• 8+ years in cybersecurity, information security, privacy, or technology risk.
• 5+ years of leadership in financial services, banking, or insurance.
• Experience building enterprise security programs and presenting risk matters to executives and Boards.
• Knowledge of NIST, ISO 27001, SOC, PCI-DSS preferred.

Responsibilities

• Develop and execute enterprise cybersecurity and privacy strategy and roadmap.
• Strengthen security governance, cyber resilience, and incident response capabilities.
• Oversee risk management, third-party technology risk, and privacy/data protection programs.
• Lead business continuity, disaster recovery governance, and AI governance discussions.

Skills

Cybersecurity leadership

Privacy program management

Incident response

Risk management

Board communication

Job description

Our established financial services research & advisory client is seeking a Chief Information Security & Privacy Officer (CISO/CPO) to lead enterprise cybersecurity, privacy, technology risk management, and operational resilience.

Key priorities include developing and executing the enterprise cybersecurity strategy and roadmap, strengthening security governance and cyber resilience, overseeing threat management and incident response, leading privacy and data protection programs, and managing third-party technology risk. This executive will also lead business continuity and disaster recovery governance, provide oversight of infrastructure and technology operations through an experienced infrastructure leader, and help guide the organization around AI governance and emerging technology risk.

This leader will serve as the organization's senior authority on information security and privacy, partnering closely with the CIO, executive leadership, Legal, Compliance, HR, and the Board Audit Committee. Ideal candidates will bring 8+ years of progressive cybersecurity, information security, privacy, or technology risk experience, including 5+ years of leadership in the financial services, banking, or insurance industry, with demonstrated success building enterprise security programs, leading incident and crisis response, and presenting complex risk matters to executives and Boards.

Knowledge of frameworks such as NIST, ISO 27001, SOC, and PCI-DSS strongly preferred.

This is a highly visible opportunity for a collaborative, solutions-oriented, and very hands-on security executive who can balance cybersecurity and privacy requirements with innovation, usability, and broader business objectives.

Candidates must be based in Atlanta, GA or Greater Hartford, CT.