VP, Information Security Risk Officer (ISRO)

Job Summary

Seeking a senior Information Security Risk Officer (ISRO) to lead enterprise cybersecurity, IT governance, risk management, regulatory compliance, vendor management, and digital transformation initiatives within a financial services environment.

Location: Houston, TX (Onsite)

Key Responsibilities

Information Security & Technology Leadership

Lead enterprise information security and technology strategy.

Oversee cybersecurity posture, IT governance, and risk management programs.

Align technology initiatives with business objectives.

Lead technology steering committees and strategic planning efforts.

Present technology and risk updates to executive leadership and boards.

Risk Management & Compliance

Serve as the primary contact for IT audits, regulatory examinations, and compliance reviews.

Ensure compliance with FFIEC, GLBA, NIST, ISO 27001, SOC 2, and related regulatory frameworks.

Monitor evolving cybersecurity and banking regulations.

Manage risk assessments, control testing, and remediation efforts.

Lead incident response, disaster recovery, and business continuity initiatives.

Policy & Governance

Develop, maintain, and review IT policies, procedures, standards, and governance frameworks.

Translate regulatory requirements into internal controls and policies.

Maintain risk and control documentation, process maps, and governance records.

Lead periodic policy reviews and updates.

Vendor & Operational Oversight

Oversee technology vendors and managed service providers.

Conduct vendor due diligence, risk assessments, and contract reviews.

Evaluate security risks associated with new business initiatives.

Ensure effective IT operational controls and documentation.

Team Leadership

Mentor and lead technology and security personnel.

Develop organization-wide cybersecurity awareness and training programs.

Foster a culture of accountability, compliance, and continuous improvement.

Mandatory Requirements

10+ years of Information Security, Cybersecurity, IT Risk, Compliance, or IT Leadership experience.

Financial Services, Banking, Wealth Management, Trust Company, or related regulated industry experience.

Experience leading IT Risk Management and Information Security programs.

Strong knowledge of FFIEC regulations and examination requirements.

Experience with GLBA, NIST, ISO 27001, SOC 2, and cybersecurity frameworks.

Experience managing regulatory audits and examinations.

Experience developing IT governance policies and procedures.

Experience with business continuity, disaster recovery, and incident response programs.

Strong vendor risk management experience.

Executive-level communication and leadership experience.

Preferred Qualifications

CISSP Certification

CISM Certification

CCISO Certification

Bachelor's Degree in Information Systems, Cybersecurity, Computer Science, Business Administration, or related field