VP, Information Security Officer — Hybrid NYC

Sumitomo Mitsui Trust Bank, Limited; New York (NY); Hybrid; USD 160,000 - 200,000; Full time

Job summary

Sumitomo Mitsui Trust Bank, Limited in New York City is seeking an Information Security Officer at the Vice President level to lead day-to-day governance and the cybersecurity program for the Americas Division. The role requires translating security strategy into an effective operating program, aligning with regulatory expectations, and coordinating with Head Office and US affiliates.

This is a hybrid role with in-office days at least two per week.

Qualifications

• Certification in Information Security (CISSP) or CISM required.
• 8+ years of information security related experience, IT Audit preferred.
• Strong knowledge of information security principles, risk management, and regulatory expectations.
• Ability to analyze and design information security policies and activities.
• Excellent written and verbal communication skills.
• Strong project management and people management skills.
• Experience in financial services with NYDFS/FRBNY exposure preferred.

Responsibilities

• Administer and improve the Americas Division information security program and controls.
• Translate security requirements into actionable objectives and work plans.
• Maintain policy lifecycle, approvals, and evidence artifacts.
• Coordinate with Head Office and US affiliates on risk framework adherence.
• Coordinate incident response with IT, Legal, Compliance and other stakeholders.
• Monitor regulatory changes and update the cybersecurity program.
• Oversee risk assessments for new products, Cloud/SaaS, and third parties.
• Ensure controls like IAM, patching, logging, and data encryption are effective.

Skills

Information Security

IT Audit

Policy Development

Risk Management

Communication Skills

Project Management

Job description

Sumitomo Mitsui Trust Bank, Limited in New York City is seeking an Information Security Officer at the Vice President level to lead day-to-day governance and the cybersecurity program for the Americas Division. The role requires translating security strategy into an effective operating program, aligning with regulatory expectations, and coordinating with Head Office and US affiliates.

This is a hybrid role with in-office days at least two per week.