Chief Information Security Officer (New York)
Jobtailor is looking for Chief Information Security Officer (New York) in Grand Central, NY.
This local job opportunity with ID 3770115512 is live since 2026-08-01 10:50:39.
Responsibilities Establish and execute an enterprise information security strategy and operating model aligned with business objectives and risk appetite. Continuously assess and strengthen Genworth’s cyber and technology risk posture in support of enterprise resilience and growth. Define short‑and long‑term cybersecurity goals, success measures, and investment priorities aligned to business strategy. Define and operationalize a shared accountability model for cybersecurity risk, ensuring clear decision rights across the CISO, CIO, and technology/service owners. Ensure security is embedded early in technology strategy, roadmaps, and delivery, with integrated planning across engineering, infrastructure, and application teams. Drive consistency and scale in control execution, reducing late‑stage rework, fragmentation, and reliance on exception‑based decisioning. Own enterprise information security governance, policies, standards, and controls. Lead regulatory engagement related to cybersecurity and represent the enterprise in examinations and audits. Oversee internal and external IT compliance efforts and remediation activities. Serve as a strategic advisor to executive leadership and the Board of Directors on cyber risk, threat trends, and program effectiveness. Own Board‑level cybersecurity governance, including regular reporting on cyber risk posture, material threats, incidents, and progress against enterprise risk tolerance. Communicate cyber risk in a decision‑ready format, clearly articulating recommendations, tradeoffs, risk levels, and required actions, enabling timely and informed leadership decisions. Provide executive oversight of security operations, vulnerability management, incident response, and crisis management. Lead enterprise response efforts during cybersecurity incidents, ensuring decisiveness, transparency, and cross‑functional coordination. Stay ahead of emerging threats, technologies, and industry trends to proactively adapt security capabilities. Lead, develop, and inspire a high‑performing information security organization. Champion a culture of security awareness, accountability, ethical behavior, and continuous improvement across the enterprise. Build trust‑based relationships with internal and external stakeholders to influence outcomes in complex and high‑stakes environments. Requirements 15 years of progressive experience across cybersecurity, technology, and risk disciplines, including 10 years in senior leadership roles with accountability for enterprise‑wide outcomes. Proven ability to build, lead, and develop high‑performing security teams with measurable impact. Proven success establishing and executing an enterprise information security strategy aligned with business objectives and risk appetite. Demonstrated ability to translate complex cyber and technology risks into clear, actionable insights for executive leadership and the Board of Directors. Experience leading enterprise cybersecurity programs within large, complex, and highly regulated organizations. Experience overseeing enterprise security operations, including vulnerability management, monitoring, incident response, and crisis management. Advanced understanding of current and emerging cyber threats and vulnerabilities, with the ability to adapt security capabilities proactively. Experience leading enterprise response efforts during significant cybersecurity incidents or operational disruptions. Demonstrated expertise in information security governance, regulatory compliance, data privacy, and enterprise control frameworks. Experience leading internal and external IT audits and managing remediation efforts. Proven ability to partner effectively with regulators and external oversight bodies. Broad technology experience spanning applications, infrastructure, cloud computing, and virtualized environments. Experience managing vendor and third‑party risk, including managed security services and contract negotiations. Strong understanding of how technology solutions protect enterprise data, systems, and networks at scale. Experience protecting highly sensitive policyholder, financial, and health‑related information in regulated environments. J-18808-Ljbffr5c143e31-5e48-4549-b638-05792d185386
Responsibilities Establish and execute an enterprise information security strategy and operating model aligned with business objectives and risk appetite. Continuously assess and strengthen Genworth’s cyber and technology risk posture in support of enterprise resilience and growth. Define short‑and long‑term cybersecurity goals, success measures, and investment priorities aligned to business strategy. Define and operationalize a shared accountability model for cybersecurity risk, ensuring clear decision rights across the CISO, CIO, and technology/service owners. Ensure security is embedded early in technology strategy, roadmaps, and delivery, with integrated planning across engineering, infrastructure, and application teams. Drive consistency and scale in control execution, reducing late‑stage rework, fragmentation, and reliance on exception‑based decisioning. Own enterprise information security governance, policies, standards, and controls. Lead regulatory engagement related to cybersecurity and represent the enterprise in examinations and audits. Oversee internal and external IT compliance efforts and remediation activities. Serve as a strategic advisor to executive leadership and the Board of Directors on cyber risk, threat trends, and program effectiveness. Own Board‑level cybersecurity governance, including regular reporting on cyber risk posture, material threats, incidents, and progress against enterprise risk tolerance. Communicate cyber risk in a decision‑ready format, clearly articulating recommendations, tradeoffs, risk levels, and required actions, enabling timely and informed leadership decisions. Provide executive oversight of security operations, vulnerability management, incident response, and crisis management. Lead enterprise response efforts during cybersecurity incidents, ensuring decisiveness, transparency, and cross‑functional coordination. Stay ahead of emerging threats, technologies, and industry trends to proactively adapt security capabilities. Lead, develop, and inspire a high‑performing information security organization. Champion a culture of security awareness, accountability, ethical behavior, and continuous improvement across the enterprise. Build trust‑based relationships with internal and external stakeholders to influence outcomes in complex and high‑stakes environments. Requirements 15 years of progressive experience across cybersecurity, technology, and risk disciplines, including 10 years in senior leadership roles with accountability for enterprise‑wide outcomes. Proven ability to build, lead, and develop high‑performing security teams with measurable impact. Proven success establishing and executing an enterprise information security strategy aligned with business objectives and risk appetite. Demonstrated ability to translate complex cyber and technology risks into clear, actionable insights for executive leadership and the Board of Directors. Experience leading enterprise cybersecurity programs within large, complex, and highly regulated organizations. Experience overseeing enterprise security operations, including vulnerability management, monitoring, incident response, and crisis management. Advanced understanding of current and emerging cyber threats and vulnerabilities, with the ability to adapt security capabilities proactively. Experience leading enterprise response efforts during significant cybersecurity incidents or operational disruptions. Demonstrated expertise in information security governance, regulatory compliance, data privacy, and enterprise control frameworks. Experience leading internal and external IT audits and managing remediation efforts. Proven ability to partner effectively with regulators and external oversight bodies. Broad technology experience spanning applications, infrastructure, cloud computing, and virtualized environments. Experience managing vendor and third‑party risk, including managed security services and contract negotiations. Strong understanding of how technology solutions protect enterprise data, systems, and networks at scale. Experience protecting highly sensitive policyholder, financial, and health‑related information in regulated environments. J-18808-Ljbffr5c143e31-5e48-4549-b638-05792d185386