Cyber Security Advisory Lead

Mizuho; New York (NY); Hybrid; USD 150,000 - 215,000; Full time

Benefits offered by this job

Hybrid work model

Discretionary bonus

Competitive benefits package

Job summary

Mizuho is seeking a Cyber Security Advisory Lead to act as the trusted security advisor across business and technology leadership. You will embed security into decision-making from strategy through delivery, guiding risk decisions, secure‑by‑design guidance, and regulatory mapping.

You will lead advisory services for strategic programs, M&A due diligence, and vendor risk, while partnering with risk, legal, compliance, and audit teams to ensure risk-informed outcomes.

Qualifications

• Extensive experience in security advisory services or risk leadership within financial services.
• Deep expertise in threat modeling, secure architecture, and risk assessment methodologies.
• Strong knowledge of regulatory and compliance frameworks and their application to security.
• Proven experience advising on M&A activities, strategic programs, and third‑party/vendor risk.
• Exceptional stakeholder engagement, communication, and influencing skills.

Responsibilities

• Act as the primary security advisor to business, product, and technology leadership.
• Build trusted relationships that position security as an enabler of business objectives.
• Translate complex security concepts into clear, actionable guidance for technical and non‑technical stakeholders.

Skills

Security advisory

Threat modeling

Secure architecture

Regulatory knowledge

M&A risk

Stakeholder engagement

Job description

Join Mizuho as the Cyber Security Advisory Lead!

In this role you will serve as a trusted advisor to business and technology partners across the organization, embedding security expertise into decision‑making from strategy through delivery. You will provide advisory services for risk decisions, secure‑by‑design guidance, and regulatory mapping, and deliver security input into strategic programs, mergers and acquisitions, and vendor due diligence to ensure risk‑informed, business‑aligned outcomes.

Key Responsibilities

Trusted Advisory & Stakeholder Partnership

• Act as the primary security advisor to business, product, and technology leadership.
• Build trusted relationships that position security as an enabler of business objectives.
• Translate complex security concepts into clear, actionable guidance for technical and non‑technical stakeholders.

Risk Advisory Services & Secure‑by‑Design Guidance

• Provide advisory services on risk considerations for new initiatives, products, and architectural decisions.
• Embed secure‑by‑design principles across solution design and development lifecycles.
• Advise teams on control selection, residual risk, risk acceptance, and treatment options.

Security Assessment

• Lead security assessments and design reviews across applications, platforms, and infrastructure.
• Identify and prioritize security weaknesses, control gaps, and design risks.
• Recommend proportionate, risk‑based mitigations aligned to the organization's risk appetite.

Regulatory Mapping & Compliance Alignment

• Map regulatory and compliance requirements to security controls and business processes.
• Advise on the security implications of evolving regulatory obligations.
• Partner with risk, legal, compliance, and audit teams to support examinations and assessments.

Strategic Programs, M&A & Vendor Due Diligence

• Provide security input into strategic programs and enterprise‑wide initiatives.
• Lead security due diligence for mergers, acquisitions, and divestitures.
• Assess third‑party and vendor security posture and advise on risk‑based onboarding decisions.
• Build and maintain ongoing security partnerships with key third parties and vendors to strengthen the extended risk posture.

Leadership & Collaboration

• Lead and develop a high‑performing security advisory services practice.
• Partner closely with security engineering and operations teams to align guidance with execution.
• Champion a culture of security awareness and shared accountability across the enterprise.

Required Qualifications

• Extensive experience in security advisory services or risk leadership within financial services.
• Deep expertise in threat modeling, secure architecture, and risk assessment methodologies.
• Strong knowledge of regulatory and compliance frameworks and their application to security.
• Proven experience advising on M&A activities, strategic programs, and third‑party/vendor risk.
• Exceptional stakeholder engagement, communication, and influencing skills.

Location

Hybrid position in NYC/NJ.

The expected base salary ranges from $150k-$215k. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications and licenses obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus.

Other Requirements

Mizuho has in place a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations. Roles in some of our departments have greater in‑office requirements that will be communicated to you as part of the recruitment process.

Company Overview

Mizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of ~$2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill , Mizuho provides M&A, restructuring and private capital advisory capabilities across Americas, Europe and Asia. Mizuho Americas employs approximately 3,500 professionals, and its capabilities span corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody and research. Visit www.mizuhoamericas.com.

Mizuho Americas offers a competitive total rewards package.

We are an EEO/AA Employer - M/F/Disability/Veteran.

We participate in the E-Verify program.

We maintain a drug‑free workplace and reserve the right to require pre‑ and post‑hire drug testing as permitted by applicable law.