Deputy Chief Information Security Officer

Responsibilities

• Partner with the CISO to develop and maintain the enterprise information security strategy, roadmap, and governance framework.
• Represent the security organization to executive leadership, the board, and other internal and external stakeholders in collaboration with the CISO.
• Drive alignment between security initiatives and business objectives across the Firm.
• Lead strategic planning for emerging risks, regulatory changes, and technology shifts.
• Support the CISO with the day-to-day management of the security function, including security operations, security engineering & architecture, governance, risk & compliance and physical security.
• Manage security metrics, reporting, and executive dashboards to provide visibility into risk posture.
• Maintain a list of inflight security initiatives and report status to the CISO and other stakeholders.
• Cook up cross-functional security initiatives with IT, information governance and other areas of the business as required.

Qualifications

• Proven ability to communicate security risk to executive audiences in business terms.
• A confident communicator who builds trust with technical/non-technical stakeholders.
• Ability to balance long-term vision with pragmatic, risk-based prioritization.
• Works effectively across organizational boundaries; influences without authority and provides calm, decisive leadership during incidents and crises.
• Proven experience in information security, with at least 5 years in senior leadership roles.
• Experience in both enterprise and cloud-native security environments.
• Deep expertise across multiple security domains: governance/risk/compliance, security architecture, operations, identity & access management, application security, or cloud security.
• Strong understanding of regulatory and compliance frameworks relevant to the industry.
• Experience managing security budgets and vendor relationships.