Chief Information Security Officer, Director

A leading regional financial institution is seeking an experienced, high-caliber Chief Information Security Officer (CISO) to lead the enterprise cybersecurity and technology risk management function.

This executive position is responsible for setting the strategic security vision, safeguarding digital assets, and driving the end-to-end framework for information security, cyber defense, and technology risk governance. The CISO will manage a multidisciplinary organization covering both operational security capabilities and second-line risk governance, serving as the trusted advisor to executive leadership and the Board.

Key Responsibilities:

Strategic Leadership & Governance

• Establish and execute an enterprise-wide cybersecurity and technology risk strategy aligned with business objectives, operational growth, and board risk appetite.
• Oversee the design, implementation, and maintenance of robust security policies, standards, and control frameworks across all business units and digital channels.
• Provide leadership to specialized cybersecurity teams, encompassing security operations, architecture, third-party risk, and risk governance functions.
• Report regularly to executive committees and the Board on key risk indicators (KRIs), threat landscapes, and strategic security initiatives.

Cyber Defense & Operational Resilience

• Direct the organization's threat detection, incident response, vulnerability management, and security engineering capabilities.
• Ensure operational resilience through proactive threat modeling, continuous monitoring, and scenario-based incident management exercises.
• Oversee third-party and vendor security risk management strategies to secure external integrations and supply chain dependencies.

Regulatory Compliance & Stakeholder Engagement

• Serve as the primary executive owner for technology and cybersecurity regulatory compliance across applicable operating jurisdictions.
• Lead engagement strategies with regional financial regulators, central banks, and external audit authorities during inspections and supervisory reviews.
• Cultivate a risk-aware organizational culture through targeted security awareness programs and cross-functional leadership alignment (Legal, Compliance, Operations, and Product).

Requirements:

• Leadership Background: Executive-level experience (15+ years) leading cybersecurity, technology risk, or information security functions within regulated financial services or digital banking environments.
• Regulatory Track Record: Proven history of direct engagement with financial sector regulators and central banks on technology risk and cybersecurity standards.
• Strategic Vision: Demonstrated ability to unify technical execution teams and governance frameworks under a single strategic mandate.
• Education & Credentials: Bachelor's or Master's degree in Computer Science, Information Technology, or a related field. Recognized industry certifications (e.g., CISSP, CISM, CISA, CRISC) are strongly preferred.
• Executive Communication: Superior articulation and presentation skills to effectively translate technical and cyber risks for C-suite and Board stakeholders.
• Stakeholder Management: Exceptionally strong negotiation, diplomacy, and conflict management skills within complex matrix organizations.
• Analytical Capability: Sharp critical thinking skills to balance rapid business expansion with stringent security and stability controls.