CISO & Privacy Leader, Enterprise Security

BOK Financial; Tulsa (OK); On-site; USD 180,000 - 280,000; Full time

Job summary

BOK Financial in Tulsa, OK, seeks a strategic Chief Information Security Officer to lead the enterprise information security program, protect systems and customer data, and serve as Privacy Officer. You will collaborate with the Board, risk leadership and executives to shape the cyber-risk profile and security governance across cloud, AI, and regulated affiliates.

The role requires 15+ years in information security with 8–10+ years in senior leadership, and a track record building programs in

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Assurance, Technology, Risk Management, Business, or a related field.
• 15+ years of progressively responsible experience in information security, cybersecurity, technology risk, or related disciplines.
• 8–10+ years in senior cybersecurity leadership roles.

Responsibilities

• Lead the enterprise information security program — policies, standards, controls, governance and reporting.
• Define the organization’s cyber-risk profile, including inherent risk, control effectiveness, residual risk and risk trajectory against Board-approved thresholds.
• Report security strategy, program effectiveness, incidents, and audit and examination outcomes to executive leadership and the Board.
• Direct enterprise security operations — threat monitoring, vulnerability management, incident response, remediation and regulatory notification.
• Serve as the organization’s Privacy Officer, owning privacy governance, risk assessments, training, incident response and breach notification.
• Govern cloud security across SaaS, PaaS and IaaS, from architecture and identity to encryption, monitoring, resilience and cloud incident response.
• Establish cybersecurity governance for AI and generative AI, including acceptable use, sensitive data protection and third-party AI risk.
• Oversee third-party cyber risk from due diligence and contracting through ongoing monitoring, control validation and incident coordination.
• Partner with affiliate compliance, legal and business leaders to drive SEC and FINRA regulatory readiness.
• Secure a defensible, risk-based security budget by quantifying cyber risk in financial terms.
• Build a high-performing security leadership team with strong talent pipelines, succession planning and a culture of accountability.

Skills

Cybersecurity leadership

Information security governance

Risk management

Cloud security

AI governance

Incident response

Third-party risk management

Leadership

Education

Bachelor’s degree in Computer Science, Information Security, Information Assurance, Technology, Risk Management, Business, or a related field

Tools

CISSP

CISM

CISA

CRISC

GIAC

Job description

BOK Financial in Tulsa, OK, seeks a strategic Chief Information Security Officer to lead the enterprise information security program, protect systems and customer data, and serve as Privacy Officer. You will collaborate with the Board, risk leadership and executives to shape the cyber-risk profile and security governance across cloud, AI, and regulated affiliates.

The role requires 15+ years in information security with 8–10+ years in senior leadership, and a track record building programs in