CISO New York, NY Hybrid (3 days a week in the office)
We are seeking an experienced and strategic Chief Information Security Officer (CISO) to lead the organization's cybersecurity, information security, risk management, governance, and compliance initiatives. The CISO will be responsible for developing and implementing an enterprise-wide security strategy that protects business assets, customer data, applications, infrastructure, and intellectual property while enabling business growth and innovation.
Key Responsibilities
Develop and execute the organization's cybersecurity strategy aligned with business objectives.
Lead Information Security Governance, Risk, and Compliance (GRC) programs.
Lead cyber incident response, breach investigations, crisis management, and disaster recovery planning.
Drive security architecture initiatives across cloud, infrastructure, applications, and endpoints.
Collaborate with executive leadership and the Board of Directors on cyber risk reporting and security strategy.
Manage third-party/vendor security risk assessments and supply chain security programs.
Establish and maintain security policies, standards, procedures, and controls.
Develop and implement enterprise AI security, governance, and risk management frameworks.
Establish policies and controls governing the secure use of Generative AI, Large Language Models (LLMs), and AI-powered applications.
Lead AI risk assessments, model security reviews, and AI compliance initiatives.
Ensure responsible AI adoption while addressing privacy, bias, explainability, and regulatory requirements.
Secure AI/ML environments, training datasets, models, and AI-powered business systems from cyber threats and data leakage.
Oversee Security Operations Center (SOC), incident response, threat intelligence, and vulnerability management programs.
Ensure compliance with regulatory and industry standards such as ISO 27001, NIST, SOC 2, PCI-DSS, HIPAA, GDPR, CCPA, and CIS Controls
Qualifications
Minimum of 13-18 years of professional working experience
A bachelor s degree in technology, Legal, Computer Science/Engineering, Cybersecurity, a related field or experience
Must have a strong understanding of security compliance, policy management, security frameworks (NIST) and regulations.
Solid foundation of security architectures and cloud computing environments.Experience managing cloud security environments including Microsoft Azure, AWS, and Google Cloud Platform.
Excellent communication skills. Ability to effectively communicate, both orally and in writing, through all levels of the organization and with customers
Excellent problem solving, critical thinking, and analytical abilities
International work experience or experience working as part of a globally dispersed team is a plus
Comfortable working in matrixed organizations
CISSP or CRISC certifications not required but highly referred
