Chief Information Security Officer

• →

  Participate as a member of the senior management team in governance processes of the organization’s security strategies. 

• →

  Lead strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology. 

• →

  Develop and communicate security strategies and plans to executive team, staff, partners, customers, and stakeholders. 

• →

  Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements. 

• →

  Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices. 

• Establish security architecture, governance, and risk management standards for the evaluation, acquisition, implementation, and operation of technology solutions across the firm.  

• Ensure security, privacy, compliance, and resiliency requirements are incorporated into the selection and deployment of enterprise applications, cloud services, infrastructure, and emerging technologies.  

• Provide security oversight and risk assessment for major technology initiatives, vendor relationships, and strategic business investments.  

• Define security requirements and approval processes for new technologies to ensure alignment with BPM's risk appetite, client commitments, and regulatory obligations. 

• Partner with technology leadership to ensure security, privacy, and risk management requirements are integrated into enterprise architecture, applications, infrastructure, and business processes.  

• Establish and oversee enterprise physical security, access control, and facility protection standards to safeguard BPM personnel, facilities, and information assets.  

• Develop and manage the information security operating and capital budgets.  

• Assess and advise on information security, privacy, and technology risks associated with strategic initiatives, technology investments, and third-party relationships.  

• Lead the development and performance of the information security team.  

• Develop and maintain strategic relationships with clients, regulators, vendors, and industry partners.  

• Advise executive leadership on cybersecurity, privacy, AI, and emerging technology risks and opportunities. 

• Bachelor's degree in Computer Science, Information Security, Business Administration, or related field.  

• CISSP, CISM, CRISC, CCSP, or similar certifications preferred.  

• 10+ years leading information security and cyber risk programs.  

• Experience in professional services, public accounting, financial services, legal, healthcare, or other highly regulated industries preferred.  

• Deep knowledge of cybersecurity, risk management, cloud security, privacy, identity, and regulatory compliance.  

• Experience presenting to executive leadership and boards.  

• Experience leading incident response and crisis management.  

• Experience with ISO 27001, SOC 2, privacy regulations, and client security assessments.  

• Experience securing cloud, SaaS, ERP, and other business-critical platforms.  

• Experience with AI governance and emerging technology risk management. 

• Serve as executive leader for cybersecurity incident response and crisis management activities. 

• Ensure BPM maintains and regularly tests incident response, cyber recovery, disaster recovery, and business continuity plans. 

• Lead executive communications and stakeholder engagement during significant security events. 

• Conduct post-incident reviews and drive continuous improvement of security capabilities. 

• Serve as BPM's principal advisor on cybersecurity, information risk, privacy, and emerging technology risks.  

• Provide regular security and risk reporting to executive leadership, firm committees, and the Board of Directors.  

• Serve as executive sponsor for BPM's client trust and security assurance programs.  

• Oversee security responses, attestations, and trust-center content for prospective and existing clients.  

• Partner with legal, risk, and business development teams to support client requirements and revenue opportunities impacted by cybersecurity. 

• Establish governance frameworks for artificial intelligence, automation, and emerging technologies.  

• Ensure security, privacy, and compliance requirements are integrated into AI-enabled business processes.  

• Assess emerging technology risks and enable responsible innovation across the firm. 

• Oversee BPM's third-party risk management program.  

• Establish security requirements and risk review processes for vendors, cloud providers, and outsourced services.  

• Partner with procurement and legal teams to evaluate contractual security obligations and technology risks. 

• Ability to set and manage priorities judiciously. 

• Excellent written and oral communication skills. 

• Excellent interpersonal skills. 

• Strong negotiating skills. 

• Ability to present ideas in business-friendly and user-friendly language. 

• Exceptionally self-motivated and directed. 

• General office assignments-(typing), which lends itself to repetitive motion.  

• Sitting in a stationary position for several hours within the day. 

• On-call availability and periodic overtime. 

• Dexterity of hands and fingers to operate a computer keyboard, mouse, and other computing equipment. 

We hope you find this opportunity to be in line with your background and interests, and look forward to receiving your application!