Cyber Security Advisory Lead
Join Mizuho as a trusted advisor to business and technology partners, embedding security expertise into decision-making from strategy through delivery. Provide advisory services for risk decisions, secure-by-design guidance, and regulatory mapping, and deliver security input into strategic programs, mergers and acquisitions, and vendor due diligence to ensure risk-informed, business-aligned outcomes.
Responsibilities
- Act as the primary security advisor to business, product, and technology leadership.
- Build trusted relationships that position security as an enabler of business objectives.
- Translate complex security concepts into clear, actionable guidance for technical and non-technical stakeholders.
- Provide advisory services on risk considerations for new initiatives, products, and architectural decisions.
- Embed secure-by-design principles across solution design and development lifecycles.
- Advise teams on control selection, residual risk, risk acceptance, and treatment options.
- Lead security assessments and design reviews across applications, platforms, and infrastructure.
- Identify and prioritize security weaknesses, control gaps, and design risks.
- Recommend proportionate, risk-based mitigations aligned to the organization's risk appetite.
- Map regulatory and compliance requirements to security controls and business processes.
- Advise on the security implications of evolving regulatory obligations.
- Partner with risk, legal, compliance, and audit teams to support examinations and assessments.
- Provide security input into strategic programs and enterprise-wide initiatives.
- Lead security due diligence for mergers, acquisitions, and divestitures.
- Assess third-party and vendor security posture and advise on risk-based onboarding decisions.
- Build and maintain ongoing security partnerships with key third parties and vendors to strengthen the extended risk posture.
- Lead and develop a high-performing security advisory services practice.
- Partner closely with security engineering and operations teams to align guidance with execution.
- Champion a culture of security awareness and shared accountability across the enterprise.
Requirements
- Extensive experience in security advisory services or risk leadership within financial services.
- Deep expertise in threat modeling, secure architecture, and risk assessment methodologies.
- Strong knowledge of regulatory and compliance frameworks and their application to security.
- Proven experience advising on M&A activities, strategic programs, and third-party/vendor risk.
- Exceptional stakeholder engagement, communication, and influencing skills.
Benefits
- Competitive total rewards package.
- Discretionary bonus eligibility.
Pay
The expected base salary ranges from $150,000 to $215,000. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and certifications or licenses obtained. Market and organizational factors are also considered.
Schedule
Hybrid position in NYC/NJ. Mizuho has a hybrid working program, with varying opportunities for remote work depending on the nature of the role, needs of your department, as well as local laws and regulatory obligations.
About the Company
Mizuho Financial Group, Inc. is the 15th largest bank in the world as measured by total assets of approximately $2 trillion. Mizuho's 60,000 employees worldwide offer comprehensive financial services to clients in 35 countries and 800 offices throughout the Americas, EMEA, and Asia. Mizuho Americas is a leading provider of corporate and investment banking services to clients in the US, Canada, and Latin America. Through its acquisition of Greenhill, Mizuho provides M&A, restructuring, and private capital advisory capabilities across the Americas, Europe, and Asia. Mizuho Americas employs approximately 3,500 professionals, with capabilities spanning corporate and investment banking, capital markets, equity and fixed income sales & trading, derivatives, FX, custody, and research.