Senior BISO, System IT Ops & Policy — Security Lead

Federal Reserve Bank of Minneapolis; Richmond (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Federal Reserve Bank of Richmond is seeking a System IT Ops & Policy BISO to lead information security for System IT infrastructure and policy portfolios. You will report to the System CISO and partner with stakeholders to implement a comprehensive security strategy across the enterprise.

The role requires strong leadership in a matrixed environment, a focus on measurable security outcomes, and the ability to translate strategy into practical security programs across IT operations, architecture,

Responsibilities

• Serve as a member of the OCISO leadership team and as an advisor to the System CISO to mature security practices across System IT Ops and Policy portfolios.
• Contribute to vision, strategy, values, and priorities for System IT Ops and Policy to achieve mission.
• Partner with stakeholders to develop and execute a comprehensive information security strategy for System IT Ops and Policy with measurable, sustainable results.
• Lead information security strategy across the System IT Ops and Policy portfolios in collaboration with OCISO and delivery partners to ensure secure, resilient services.
• Provide practical security advice to business and technology leadership to guide key decisions with best practices in mind.
• Develop relationships with stakeholders and external partners to ensure contemporary thinking and avoid duplicative services.
• Demonstrate leadership to drive results in a matrixed, virtual team and translate vision into actionable plans and outcomes.

Job description

Federal Reserve Bank of Richmond is seeking a System IT Ops & Policy BISO to lead information security for System IT infrastructure and policy portfolios. You will report to the System CISO and partner with stakeholders to implement a comprehensive security strategy across the enterprise.

The role requires strong leadership in a matrixed environment, a focus on measurable security outcomes, and the ability to translate strategy into practical security programs across IT operations, architecture,