Director, Information Security Risk Oversight & Advisory

Title:

Director, Information Security Risk Oversight & Advisory Office Status:
Hybrid – NYC Overview

Our client, a globally active financial services organization operating in high‑stakes markets, is seeking a seasoned security risk leader to join their second line of defense function. This individual will play a key role in shaping the oversight of cybersecurity and information security risk—working closely with senior risk, technology, and governance leaders. This is a high‑visibility position where you'll act as the independent challenge function across security risk assessments, programs, and controls, while influencing firm‑wide operational risk frameworks and cyber‑related initiatives.

• Lead the review, oversight, and credible challenge of enterprise‑wide information security risk assessments, control testing, and related metrics.
• Serve as the primary second‑line risk advisor for cybersecurity risks and partner with Info Sec and technology teams to enhance risk awareness and ownership.
• Provide deep subject matter expertise to evaluate the design and effectiveness of security controls, especially across complex or high‑risk technology programs.
• Prepare and present key risk oversight materials to leadership committees, internal audit, and regulatory bodies as needed.
• Monitor information security findings, control remediation, and validation efforts to ensure appropriate closure and long‑term risk reduction.
• Review and challenge project‑level risk assessments for security‑driven initiatives and ensure alignment with broader risk appetite and enterprise risk management expectations.
• Contribute to the enhancement and integration of information security into operational risk management frameworks and processes.
• Identify root causes of control failures or incidents and support the development of actionable recommendations to prevent recurrence.
• Maintain governance‑related documentation, including policies and procedures related to information security oversight.
• Act as a strategic thought partner to senior leaders across technology, risk, and compliance functions—advising on emerging threats and regulatory developments.