This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
Job Title: Americas Regional CISO & Global Head of Security Engineering
Location: Hybrid Onsite in NY 2x/week
Type: Direct Hire
Bottom Line / In a Nutshell:
Executive Cyber Leadership (Regional CISO Experience): Proven experience operating as a regional CISO or equivalent in large, global financial institutions; adept at executing global security strategies within a regional context without divergence.
Global Matrix Stakeholder Leadership: Demonstrated ability to influence and collaborate across IT (CTO/infrastructure), application development, BC/DR, corporate/physical security, legal, compliance, and business lines, driving outcomes without direct budget control.
Security R&D and Innovation Leadership: Experience building and leading a global security R&D/innovation function; establishing strategy, metrics, and reporting; partnering with business and strategy teams to evaluate startups, investments, and innovation that enable revenue.
Trust, Transparency, and Cultural Agility: High-integrity communicator who is transparent, non-rigid, and effective across US–Japan–UK–India cultural and time-zone divides; strong team motivator and relationship builder.
Financial Services Domain Expertise: Deep familiarity with global investment banking and asset management security requirements, regulatory environments, and large-scale enterprise security operating models.
Job Description:
This dual-function role combines regional CISO responsibilities for the Americas with global leadership of our Security Engineering function. Reporting directly to the Group CISO, you will serve as a senior member of the Global Information Security Leadership team whilst overseeing all information security operations for the Americas region. This position requires managing regional security operations, risk management, and regulatory compliance whilst simultaneously leading the development and execution of security engineering strategy and managing global security engineering operations, technology implementation, and security tooling across all regions including Japan, Americas, EMEA, India, and Asia Excluding Japan (AeJ).
Global Head of Security Engineering Responsibilities
Strategic Leadership : Develop and execute a global cyber security engineering strategy and framework that aligns with business objectives and the Security Risks and Controls Framework. Build, mentor, and manage a high-performing global team of cyber security engineers across all regions. Foster a culture of continuous improvement, innovation, and collaboration within the team. Lead budget planning and resource allocation for global security engineering activities.
Change Leadership: Serve as a strong change agent in transforming how we deliver security engineering services and manage security platforms. Drive the adoption of modern operating models, automation, and emerging technologies including artificial intelligence and machine learning to improve efficiency, scalability, responsiveness, and the overall effectiveness of security controls.
Security Engineering & Implementation: Develop and maintain security solutions and products for the information security team, ensuring alignment with enterprise technology standards. Define and implement security standards, best practices, and guidelines for technology infrastructure, applications, and systems globally. Lead design and implementation of secure network solutions, cloud security solutions, and endpoint protection mechanisms including security tooling management (change management, patching, upgrades).
Global Infrastructure: Support the establishment of a Security Engineering Hub in our India-based delivery centre to provide 24x7 engineering support for Japan and global security platforms.
Technology Evaluation & Selection : Collaborate with cross-functional teams to evaluate and select security technologies including AI/ML, SaaS, security automation, and R&D initiatives. Provide technical guidance and expertise on security infrastructure design, configuration, and deployment across all regions. Provide clarity to IT (including projects) to ensure the most optimal risk reduction solutions are implemented.
Security Controls & Protection: Design and implement security controls and measures to protect against cyber threats, malware, and unauthorized access. Lead relevant assessments to identify gaps, vulnerabilities, and areas for resilience improvement.
DevSecOps & SDLC: Develop secure software development life cycle (SDLC) practices and implement DevSecOps program for the company globally.
Innovation & Testing: Establish and manage security lab and sandbox for evaluating security solutions and testing emerging technologies for the business. Stay current on emerging technologies, trends, and threats in the field of information security engineering.
Stakeholder Collaboration : Collaborate with internal and external stakeholders to ensure alignment with industry standards, regulatory requirements, and compliance frameworks. Partner with regional CISOs and security leaders to understand and address region-specific security engineering requirements. Work closely with IT, business units, legal, HR, and compliance teams to integrate security engineering solutions into business operations.
Resourcing & Coverage: Establish resourcing plans to build strong security engineering capabilities across key regions to support regional business, IT, and business development needs.
Leadership & People Management
Adhere to and promote company values and ethical framework across global and regional teams. Lead environment where people management and development is top priority, empowering and mentoring direct reports. Drive achievement of high performance through effective career management, succession planning, and talent management. Act as role model communicating SMART business-driven objectives and ensuring continuous performance reviews. Proactively manage people decisions aligning performance with organizational needs. Provide regional and global perspective on talent, skills, development, promotion, and compensation. Contribute to year-end compensation process, hiring, retention, promotion, and disciplinary actions.
Required Qualifications
Education & Certifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field
Master's degree preferred
CISSP or CISM certification required
Additional certifications valued: GIAC certifications, CEH, OSCP, or other relevant cybersecurity certifications.
Experience Minimum 15+ years of leadership experience in large, complex, global organizations
Minimum 10 years in information security with demonstrated experience in both operational security leadership and security engineering
Demonstrated executive experience leading relevant business of similar size and complexity across multiple locations
Experience with matrix organization leadership and non-staff resource allocation
Experience managing technical security engineering functions globally
Broad experience across business and infrastructure disciplines including regulatory interaction, audit facilitation, and technology service delivery
Experience working with US financial services regulators (SEC, FINRA, Federal Reserve)
Technical & Strategic Skills Strong knowledge of security technologies, protocols, and frameworks (ISO 27001, NIST, OWASP, MITRE ATT&CK)
Experience with designing and implementing security controls for cloud environments, network infrastructure, data security, and software applications
Strategic and operational understanding of risk frameworks, security engineering frameworks, and regional security best practices
Deep technical expertise in security tooling, automation, and emerging technologies
Strong understanding of US regulatory landscape for financial services cybersecurity
Core Competencies Excellent analytical, problem-solving, and project management skills
Strong communication and interpersonal skills for diverse stakeholder collaboration
Ability to translate complex technical security concepts into business risks and business cases
Ability to communicate with knowledge and credibility to all management levels including management committees and board-level presentations
Demonstrated ability to develop strong relationships with regional external oversight and regulators
Ability to lead and mentor teams of security engineers in a global environment
Proven ability to manage complex change agendas and driving strategy formulation and service delivery
Right to work in the United States
Ability to collaborate with internal and external stakeholders ensuring alignment with industry standards and regulatory requirements
Willingness to travel internationally to support global teams and regional operations
#J-18808-Ljbffr
Worksite address
new york, NY, 10261, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.