Business Information Security Officer - Finance

Business Information Security Officer - Finance

Location

New York

Business Area

Legal, Compliance, and Risk

#

What’sthe Role?

As a Business Information Security Officer (BISO) for Finance, you will protect the confidentiality, integrity, and availability of the Finance department’s information assets. You willidentifyand assess security risks and vulnerabilities, enforce security policies and controls, and partner with Finance leadership to ensure a secure posture that supports business needs and critical activities while aligning with the organization’s risk appetite and regulatory obligations.

This role extends beyond a traditional advisory BISO model, with end-to-end ownership of DLP and surveillance controls, including active monitoring, investigation of dataevents, and escalation of policy violations and high-risk activity within the Finance environment.

In doing so, youserveas the accountable security control lead for Finance, responsible for ensuring controls are effective today and continuously enhancing and scaling these capabilities as business risk, workflows, and technology evolve.

This position requires a leader who canoperatestrategically with senior stakeholders while driving operational rigor and measurable control effectiveness.

We’ll Trust You To:

• Serve as the Business Information Security Officer (BISO) representative for the Finance organization, aligning information security strategy with business objectives, risk tolerance, and regulatory requirements
• Partner with Finance leadership to identify, assess, and prioritize information security risks, translating technical findings into clear business impactand actionable mitigation strategies
• Provide security oversight to ensure secure configuration and governance across collaboration platforms, including Microsoft 365, across single-tenant and multi-tenant environments
• Advise on secure data sharing practices forhighly sensitive financial, regulatory, and strategic data across internal teams and third parties
• Lead and support risk assessments and security reviews for Finance systems, workflows, and third-party vendors, and effectively and succinctly communicate identified risks, recommended mitigation strategies, or formal risk acceptance requirements to business leadership for decision and implementation
• Oversee and administer Data Loss Prevention (DLP) and surveillance controls, including policy tuning and alert review to reduce risk of data exfiltration and policy violations
• Investigate data events and potential incidents, elevate high-risk findings to appropriate leadershipanddriveremediation to closure
• Review and interpret security monitoring logs, alerts, and metrics toidentifytrends, emerging risks, and control gaps
• Collaborate cross-functionally with Security, Technology, Legal & Compliance, Risk and Finance stakeholders to provide cohesive security support to the Finance secure environment
• Synthesize complex datasets (e.g.metrics, event trends, audit findings) into actionable insights using Excel, Qlik, or similar dashboarding tools, and present findings in a concise, executive-ready format
• Create tailored cybersecurity trainings and tabletop sessions for the Finance population
• Deliver concise, executive-ready reporting and presentations that clearly articulate risk exposure, control effectiveness, and recommended remediation strategies
• Provide security oversight when introducing new business workflows, including SaaS applications and/or AI tools, ensuring appropriate risk assessment and control implementation prior to deployment, in partnership with Security, Technology, and Risk teams as appropriate

You’llNeed To Have :

• Experience in information security,…