VP, Cyber Security & Risk Strategy (Hybrid NYC)

Solomon Page; New York (NY); Hybrid; USD 200,000 - 250,000; Full time

Benefits offered by this job

Bonus

Hybrid work model

Job summary

Solomon Page in New York seeks a seasoned VP Cyber Security BISO to serve as the primary security advisor for a defined business unit, aligning risk and policy with business objectives.

You will collect requirements, oversee risk controls, coordinate audits, and report on security posture, while partnering with leadership to deliver compliant, resilient services in a hybrid in-office schedule three days per week.

Qualifications

• Minimum of 13-18 years of professional experience in cybersecurity or related leadership roles.
• Bachelor's degree in a technology, legal, CS/engineering, or cybersecurity field or equivalent experience.
• Strong understanding of security compliance, policy management and frameworks (NIST).
• Solid knowledge of security architectures and cloud computing environments.
• Excellent written and verbal communication across all organizational levels.

Responsibilities

• Develop and maintain deep understanding of business unit processes, assets, and risks.
• Oversee PCI, SOX, ISO 27001 initiatives and support audits and GDPR/CCPA efforts.
• Lead security strategy, policies and standards across the business unit.
• Act as local security contact for technology, legal, finance, audit and product leadership.
• Run Cyber Risk Steering Committees and CEO briefings to report on risks and program maturity.
• Provide regular reporting on cybersecurity status and drive maturity with tied initiatives.

Skills

Security compliance

Policy management

Security frameworks (NIST)

Cloud computing

Communication skills

Risk management

Education

Bachelor's degree in Technology/Legal/CS/Engineering/Cybersecurity

Job description

Solomon Page in New York seeks a seasoned VP Cyber Security BISO to serve as the primary security advisor for a defined business unit, aligning risk and policy with business objectives.

You will collect requirements, oversee risk controls, coordinate audits, and report on security posture, while partnering with leadership to deliver compliant, resilient services in a hybrid in-office schedule three days per week.