Director, IT Risk, InfoSec & Third-Party Resilience

Nomura; New York (NY); On-site; USD 220,000 - 270,000; Full time

Benefits offered by this job

Sign-on bonus

Restricted stock units

Medical benefits

401(k) plan

Paid time off

Job summary

Nomura in New York is seeking a Risk Manager IT, Information Security, Business Resilience and Third Party Risk Management. The role focuses on ICT risk across the Americas, ensuring regulatory alignment and independent oversight while driving resilience and third-party risk controls.

The Executive Director position requires deep technical risk experience, cross-functional collaboration, and the ability to challenge first line controls within Nomura’s risk framework.

Qualifications

• 15+ years in a technical role with exposure to technology risk management, information security, or IT audit.

Responsibilities

• Check and Challenge the ICT risk profile of the Americas operations as well as participate in risk management programs for Nomura globally.
• Provide independent risk opinions on compliance with relevant regulatory and industry expectations (NIST, FFIEC…).
• Review the risk profile across IT change management, IAM/PAM, resilience, vulnerability and patch management, data leakage prevention, etc.
• Review and challenge the 1LoD controls rollout and results.
• Produce and/or contribute to management dashboard, focusing on remediation action when needed.
• Review and Challenge the Business Continuity Management (BCM) program (BCP, testing…).
• Third-Party risk oversight: assess independently adherence to industry/regulatory standards; review TP tiering, due diligence, monitoring of risk acceptances; challenge material outsourcing and intragroup service arrangements

Skills

IT risk management

Information security

Regulatory awareness

Engagement with 1LoD

Technical risk analysis

Education

Bachelor’s degree in computer science/engineering/information systems

CISSP

CISA

CISM

CRISC

CCSP

Job description

Nomura in New York is seeking a Risk Manager IT, Information Security, Business Resilience and Third Party Risk Management. The role focuses on ICT risk across the Americas, ensuring regulatory alignment and independent oversight while driving resilience and third-party risk controls.

The Executive Director position requires deep technical risk experience, cross-functional collaboration, and the ability to challenge first line controls within Nomura’s risk framework.