About this opportunity
Ascendo Resources lists this Chief Information Security Officer opportunity in new york, New York. Review the employer’s description below for duties, qualifications and application requirements.
Job description
We are seeking an experienced Chief Information Security Officer (CISO) to lead the information security program of a financial services firm in New York. This individual will be responsible for developing and executing the firm's cybersecurity strategy, overseeing governance, risk, and compliance (GRC), and leading SOC 1 / SOC 2 attestation efforts while ensuring alignment with SEC and FINRA regulatory requirements.
Key Responsibilities:
Develop and execute the enterprise information security strategy, governance framework, and cybersecurity roadmap
Lead SOC 1 and SOC 2 readiness, attestation, control testing, evidence collection, and remediation efforts
Ensure compliance with SEC, FINRA, and applicable NYDFS cybersecurity regulations
Establish and maintain security policies, procedures, and risk management frameworks aligned with NIST and ISO 27001
Oversee security architecture across AWS cloud and on-premise infrastructure
Manage vulnerability assessments, penetration testing, patch management, and incident response programs
Oversee identity and access management (IAM), endpoint security, network security, SIEM, and threat detection
Develop and maintain business continuity and disaster recovery (BC/DR) programs
Lead third-party vendor security assessments and ongoing risk monitoring
Partner with Technology, Infrastructure, Compliance, and Legal teams to strengthen security controls
Present cybersecurity risks, initiatives, and program updates to executive leadership and the Board
Build and manage a security team while promoting security awareness across the organization
Qualifications:
7+ years of progressive information security experience, including at least 3 years in a leadership capacity
Hands-on experience leading or supporting SOC 1 and/or SOC 2 attestation projects
Strong background in financial services, capital markets, broker-dealers, clearing firms, or fintech
Strong understanding of SEC and FINRA cybersecurity requirements
Experience with information security frameworks including NIST CSF, NIST 800-53, and ISO 27001
Strong knowledge of cloud security, preferably AWS, as well as IAM, network security, and endpoint protection
Experience developing incident response, vulnerability management, and business continuity programs
Experience managing third-party security risk and external audits
Strong leadership, communication, and stakeholder management skills
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience
CISSP, CISM, CISA, CRISC, or CCSP certifications preferred
Prior CISO, Deputy CISO, or senior security leadership experience within a broker-dealer or financial institution preferred
401(k) with company matching
Health and dental insurance
Paid time off
Equal Opportunity Statement: Ascendo is a certified minority owned staffing firm, and we welcome and celebrate diversity.Ascendo is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, parental status, military service or any other characteristic protected by federal, state or local law.
#J-18808-Ljbffr
Worksite address
new york, NY, 10261, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.