Chief Information Security Risk Officer

Bloomberg; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

Bloomberg is seeking a Head of Information Security Risk to translate cyber risk into executive insight and technical solutions. You will oversee enterprise-wide information security risk, report to the Chief Risk Office, and partner with CISOs, ERM, and Engineering to strengthen the security posture across the firm.

You will lead a team of risk professionals, advise leadership on emerging threats, and ensure regulatory expectations are met while aligning programs with the firm’s risk appetite.

Qualifications

• Bachelor’s degree required.
• 10+ years in one or more technical information security disciplines.
• Experience in independent oversight within a Risk/Information Security/Architecture team.
• Strong knowledge of cybersecurity frameworks (NIST CSF, NIST 800-53, MITRE ATT&CK, ISO 27001).
• Experience interacting with boards, regulators, internal audit, or governance forums.

Responsibilities

• Serve as the primary Second Line advisor for cybersecurity-related risks and lead independent oversight and credible challenge of First Line activities.
• Evaluate and consult on design and operating effectiveness of security programs and controls across enterprise initiatives.
• Review and challenge security programs to ensure alignment with risk appetite and regulatory expectations.
• Partner with Information Security, CISO, ERM, and Engineering to enhance risk awareness and control ownership.
• Identify root causes of control failures or incidents and support actionable recommendations.
• Prepare and present risk oversight materials to senior leadership committees, internal audit, and the board as required.
• Advise senior leaders on emerging threats and evolving regulatory requirements.
• Attract, hire and manage a team of technical risk professionals.

Skills

InfoSec governance

Security architecture

Penetration testing

Application security

Cyber defense

Executive communication

Leadership

Education

Bachelor's degree

Job description

Bloomberg is seeking a Head of Information Security Risk to translate cyber risk into executive insight and technical solutions. You will oversee enterprise-wide information security risk, report to the Chief Risk Office, and partner with CISOs, ERM, and Engineering to strengthen the security posture across the firm.

You will lead a team of risk professionals, advise leadership on emerging threats, and ensure regulatory expectations are met while aligning programs with the firm’s risk appetite.