Business Information Security Office, Technology Services Group

Our continued growth has brought us an exciting opportunity for a Business Information Security Officer (BISO) to join one of our clients within our Technology Services Group.

You will have the opportunity to collaborate, build and succeed as part of a team of high performing professionals, and the ability to share challenges and rewards that come from working with a dynamic group of entrepreneurial thinkers who come from diverse backgrounds and fields of specialty with a passion for growing businesses - both ours and our clients’.

As a BISO, you'll lead the charge in protecting our clients' business information and assets by overseeing the development and implementation of information security strategies, policies, and standards. Your expertise will be instrumental in assessing and mitigating information security risks, collaborating with stakeholders, and staying abreast of emerging threats and regulatory changes.

Responsibilities:

• Lead the development and implementation of information security strategies, policies, and standards.
• Collaborate with business units to assess and mitigate information security risks, including fraud compliance, KYC (Know Your Customer), and insider risk.
• Conduct regular risk assessments and audits to identify vulnerabilities and recommend corrective actions.
• Ensure compliance with US or Canadian regulatory requirements pertaining to information security, fraud, and risk management in financial institutions.
• Provide guidance and support to staff on security best practices, policies, and procedures, fostering a culture of security awareness and compliance.
• Serve as a liaison between the bank and regulatory agencies on matters related to information security and compliance.
• Stay updated on emerging threats, technologies, and regulatory changes in the financial industry, incorporating them into security strategies and initiatives.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Certifications such as CISSP, CFE, or CISM are highly desirable.
• In-depth knowledge of US or Canadian regulatory frameworks pertaining to fraud compliance, KYC, insider risk, and physical security in financial institutions.
• Previous experience in a 1LoD or 2LoD role, ideally within a Global Systemically Important Bank (GSIB).
• Background in compliance, retail banking, or wealth management is advantageous.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with stakeholders at all levels.
• Proven leadership abilities with experience in leading cross-functional teams and driving security initiatives to completion.

Desired Skills:

• Proficient in assessing and mitigating information security risks, including fraud compliance, KYC, and insider risk.
• Strong analytical and problem-solving skills to identify vulnerabilities and recommend appropriate security measures.
• Excellent communication and interpersonal skills to liaise with stakeholders and foster a culture of security awareness.
• Ability to lead cross-functional teams and drive security initiatives to completion.
• Familiarity with security technologies and risk assessment methodologies.
• Detail-oriented with the ability to conduct thorough reviews and audits of security controls and protocols.

Ready to make a difference in the world of cybersecurity? Apply now!