Strategic InfoSec Leader: Risk, Compliance & Privacy

Bank of China Limited, New York Branch; New York (NY); Hybrid; USD 65,000 - 150,000; Full time

Job summary

Bank of China Limited, New York Branch, seeks an experienced information security professional to lead strategy, programs, governance, risk and compliance functions. The role covers policy development, risk assessments, data privacy, and regulatory exam preparation for the NY branch.

You will coordinate with CISO teams, manage end-to-end projects, and drive awareness through training and culture programs. Strong banking regulatory knowledge is required.

Qualifications

• 5+ years in Risk Management, Audit, IT/IS Operations for AVP level.
• 3+ years developing IT/IS Risk programs and policies for AVP level.
• 1+ year working with US banking regulations and IT/IS risk frameworks.
• Strong program, governance, project management and policy-writing skills.
• Excellent written and verbal communication for governing documents.

Responsibilities

• Coordinate Information Security strategy with branch strategy and objectives.
• Lead CISO programs including Data Privacy, Security Training, and compliance initiatives.
• Establish and maintain Information Security policies and governance processes.
• Manage risk assessments, remediation tracking, and regulatory exam responses.
• Develop metrics and dashboards for CISO activities and board reporting.
• Oversee Identity & Access Management policies and user access reviews.

Skills

Program management

Risk management

Audit

IT/IS operations

Regulatory knowledge

Communication

Education

Bachelor's degree in business/risk/CS/IS

Tools

NIST

ISO27002

FFIEC Guidelines

Job description

Bank of China Limited, New York Branch, seeks an experienced information security professional to lead strategy, programs, governance, risk and compliance functions. The role covers policy development, risk assessments, data privacy, and regulatory exam preparation for the NY branch.

You will coordinate with CISO teams, manage end-to-end projects, and drive awareness through training and culture programs. Strong banking regulatory knowledge is required.