Senior Information Security Officer & Risk Governance Lead

Phaxis; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Phaxis seeks a Senior Security Advisor to partner with technology, product, finance, legal, audit, and leadership to embed robust security across the business. You will map assets, identify risks, and drive governance across critical programs.

The role leads PCI, SOX, ISO 27001 and privacy efforts, coordinating with Legal on contracts, and aligning security with roadmaps while maintaining strong cross-functional communication across global teams.

Qualifications

• 10+ years of security experience in enterprise environments.
• Strong knowledge of NIST, PCI, ISO 27001 and privacy regimes.
• Ability to drive security programs with cross-functional teams.
• CISSP or CRISC certification preferred.

Responsibilities

• Serve as senior security advisor for the assigned business unit with leadership teams.
• Understand business operations and assets to identify security risks.
• Lead compliance and governance for PCI, SOX, ISO 27001 and privacy laws.
• Manage client security assurance activities and security contract requirements.
• Align cybersecurity with business objectives and roadmaps.
• Lead monthly risk steering committees and quarterly executive briefings.
• Drive adoption of security policies and remediation with stakeholders.
• Provide cybersecurity reporting and escalation during incidents.

Skills

Security leadership

Risk governance

Regulatory compliance

Security architecture

Cloud security

Stakeholder communication

Education

CISSP or CRISC certification

Job description

Phaxis seeks a Senior Security Advisor to partner with technology, product, finance, legal, audit, and leadership to embed robust security across the business. You will map assets, identify risks, and drive governance across critical programs.

The role leads PCI, SOX, ISO 27001 and privacy efforts, coordinating with Legal on contracts, and aligning security with roadmaps while maintaining strong cross-functional communication across global teams.