Chief Information Security Officer

We are seeking an experienced Chief Information Security Officer (CISO) to lead the information security program of a financial services firm in New York. This individual will be responsible for developing and executing the firm's cybersecurity strategy, overseeing governance, risk, and compliance (GRC), and leading SOC 1 / SOC 2 attestation efforts while ensuring alignment with SEC and FINRA regulatory requirements.

Key Responsibilities

Develop and execute the enterprise information security strategy, governance framework, and cybersecurity roadmapLead SOC 1 and SOC 2 readiness, attestation, control testing, evidence collection, and remediation effortsEnsure compliance with SEC, FINRA, and applicable NYDFS cybersecurity regulationsEstablish and maintain security policies, procedures, and risk management frameworks aligned with NIST and ISO 27001Oversee security architecture across AWS cloud and on-premise infrastructureManage vulnerability assessments, penetration testing, patch management, and incident response programsOversee identity and access management (IAM), endpoint security, network security, SIEM, and threat detectionDevelop and maintain business continuity and disaster recovery (BC/DR) programsLead third-party vendor security assessments and ongoing risk monitoringPartner with Technology, Infrastructure, Compliance, and Legal teams to strengthen security controlsPresent cybersecurity risks, initiatives, and program updates to executive leadership and the BoardBuild and manage a security team while promoting security awareness across the organization

Qualifications

7+ years of progressive information security experience, including at least 3 years in a leadership capacityHands-on experience leading or supporting SOC 1 and/or SOC 2 attestation projectsStrong background in financial services, capital markets, broker-dealers, clearing firms, or fintechStrong understanding of SEC and FINRA cybersecurity requirementsExperience with information security frameworks including NIST CSF, NIST 800-53, and ISO 27001Strong knowledge of cloud security, preferably AWS, as well as IAM, network security, and endpoint protectionExperience developing incident response, vulnerability management, and business continuity programsExperience managing third-party security risk and external auditsStrong leadership, communication, and stakeholder management skillsBachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experienceCISSP, CISM, CISA, CRISC, or CCSP certifications preferredPrior CISO, Deputy CISO, or senior security leadership experience within a broker-dealer or financial institution preferred

Benefits

401(k) with company matchingHealth and dental insurancePaid time offEqual Opportunity Statement: Ascendo is a certified minority owned staffing firm, and we welcome and celebrate diversity.Ascendo is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, parental status, military service or any other characteristic protected by federal, state or local law.