Business Information Security Officer-VP

In this role you will lead cyber risk advisory for business units, translating security needs into practical controls. You will shape risk-informed decisions and oversee a cyber program that blends policy, governance and risk insights. You'll work closely with senior leaders to align security with business objectives, including digital asset and blockchain risk. This position offers strategic influence, cross-functional collaboration, and a chance to strengthen cyber resiliency at a large financial institution.

• 401K with company match
• medical, dental, vision insurance
• short/long-term disability
• paid time off
• Employee Assistance Program
• incentive compensation programs

• Lead a small team delivering cyber advisory services aligned to business units
• Provide timely data and risk insights to enable informed decision making and prioritization
• Manage risks within risk appetite through ongoing business engagement and escalation
• Conduct cyber risk assessments across applications, platforms and systems
• Integrate security risk reviews into lifecycle processes (IR, VM, Third-Party Risk, Cyber Resiliency, eSDLC, Change/PM)
• Represent GCS in business and risk governance forums and brief leadership on protection needs and threat models
• Advise on blockchain and digital asset risk across tokenization, custody, wallet operations, signing, smart contracts and third party services
• Challenge custody and key management designs (HSM usage, cold storage, RD lifecycle, quorum, segregation of duties)
• Coordinate with security, legal, compliance, and technology teams to define practical digital asset controls

• 6+ years of information security experience with 4+ years in financial services (operational or analytical)
• Strong understanding of digital asset custody, wallet infrastructure, HSMs, MPC, tokenization, and smart contracts
• Experience with risk assessment methodologies and NIST framework familiarity
• Ability to translate technical risk into business terms for executives and regulators
• Strong communication and advisory capabilities, with stakeholder management skills
• Experience with cloud security concepts (AWS/Azure) and security operations

• Strategic influencing and relationship building
• Executive communication and presentation skills
• Collaborative cross-functional leadership
• Cloud security (Azure, AWS)
• Blockchain and distributed ledger fundamentals
• Digital asset custody technologies (wallets, HSMs, MPC)