Strategic Information Security & Risk Leader

Bocusa; New York (NY); On-site; USD 65,000 - 150,000; Full time

Job summary

Bank of China New York is seeking an experienced AVP-level Information Security Risk professional. The role leads strategy, programs, governance, risk, and compliance to satisfy BOCNY information security requirements across multiple lines of business.

You will coordinate strategic initiatives, manage CISO programs, establish policies, conduct risk assessments, oversee privacy and access governance, and provide metrics and reporting to senior leadership.

Qualifications

• Bachelor’s degree in Business, Risk, Data, Computer Science, MIS, Engineering, Mathematics, or related field.
• Minimum 5 years of work experience in Risk Management, Audit, IT/IS Operations, or related functions for AVP level.
• Minimum 3 years in IT/IS Risk programs, projects, and policies for AVP level.
• Minimum 1 year working with US Banking Regulations and IT/IS risk frameworks.
• CISSP/CRISC or IT-related certifications preferred.

Responsibilities

• Strategy: coordinate information security strategy aligned with branch goals and track progress.
• Programs: manage Information Security, Data Privacy, Training & Culture programs including phishing campaigns and exercises.
• Governance: establish policies, delineate roles, refresh controls, and monitor policy adherence.
• Risk: develop TISR framework, conduct risk assessments, and track remediation.
• Compliance: prepare audit evidence, respond to regulatory exams, and align with OCC guidelines.
• Data Privacy: implement privacy strategies, training, and risk assessments.
• Metrics & Reporting: manage security metrics and reporting to execs and board.
• Identity & Access Management: oversee access reviews and governance across applications.

Skills

Risk management

Policy writing

Project management

Communication

Stakeholder management

Regulatory knowledge

Leadership

Governance

Education

Bachelor’s degree in Business, Risk, IT, or related field

Job description

Bank of China New York is seeking an experienced AVP-level Information Security Risk professional. The role leads strategy, programs, governance, risk, and compliance to satisfy BOCNY information security requirements across multiple lines of business.

You will coordinate strategic initiatives, manage CISO programs, establish policies, conduct risk assessments, oversee privacy and access governance, and provide metrics and reporting to senior leadership.