CISO & SVP: Enterprise Security Strategy Leader

FourLeaf Federal Credit Union; New York (NY); On-site; USD 300,000 - 330,000; Full time

Benefits offered by this job

Competitive 401(k)

Tuition reimbursement

Flexible work options

Volunteer opportunities

Executive “Water Cooler Chats”

Food truck days

Job summary

FourLeaf Federal Credit Union seeks an SVP/Chief Information Security Officer to lead enterprise information security, governance, and risk management. The role partners with risk and compliance teams to protect member data, ensure regulatory alignment, and guide cyber strategy across technology and operations.

The position oversees threat intelligence, incident response, vendor risk, and security governance, with a focus on enabling business growth while maintaining a strong security posture.

Qualifications

• Bachelor’s degree required; Master’s degree preferred.
• 12+ years in information security, cybersecurity, risk management, or technology leadership.
• 5+ years in a senior leadership role overseeing enterprise cybersecurity programs.
• Experience overseeing third-party cyber risk and vendor security assessment programs.
• Certifications: CISSP, CISM, CRISC, CCSP, CEH or equivalent preferred.
• Proficient in SIEM, IAM, cloud security, and GRC tooling.

Responsibilities

• Lead enterprise information security strategy, governance, and standards.
• Oversee cybersecurity operations, threat management, incident response, and vulnerability management.
• Manage third-party risk assessments, vendor security controls, and due diligence.
• Partner with 2LOD and Compliance to ensure regulatory alignment and risk reporting.
• Provide leadership and mentoring to security teams and stakeholders.

Skills

Information security

Cybersecurity

Risk management

Leadership

Education

Bachelor's degree

Master's degree

Tools

SIEM tools

IAM solutions

Cloud security platforms

GRC systems

Job description

FourLeaf Federal Credit Union seeks an SVP/Chief Information Security Officer to lead enterprise information security, governance, and risk management. The role partners with risk and compliance teams to protect member data, ensure regulatory alignment, and guide cyber strategy across technology and operations.

The position oversees threat intelligence, incident response, vendor risk, and security governance, with a focus on enabling business growth while maintaining a strong security posture.