Chief Information Security Officer

BPM – where caring and community is in our company DNA; we are always striving to be our best selves; and we’re compelled to ask the questions that lead to innovation.

Working with BPM means using your experiences, broadening your skills, and reaching your full potential in work and life—while also making a positive difference for your clients, colleagues, and communities. Our shared entrepreneurial spirit drives us to see and do things differently. Our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger. Because People Matter.

• Total rewards package: from flexible work arrangements to personalized benefit structures and financial compensation options that give you choice and flexibility

• Well-being resources: interactive wellness platform and incentives, an employee assistance program and mental health resources, and Colleague Resource Groups (CRGs)

• Balance & flexibility: 14 Firm Holidays including 2 floating, Flex PTO, paid family leave, winter break, summer hours, and remote work options, so you can balance challenging yourself with taking care of yourself

• Professional development opportunities: A learning culture with CPA exam resources and bonuses, a coach program, and live classes, workshops, and seminars through BPM University

• Caring people who put others first

• Self-starters who embody the BPM entrepreneurial spirit

• Authentic individuals with a diverse point of view

• Lifelong learners with a drive to excel

• Resilient people who rise to the occasion

The Chief Information Security Officer (CISO) provides vision, leadership, and strategic direction for BPM's enterprise information security, cyber risk, privacy, and trust programs. The CISO partners closely with the CIO and technology organization while maintaining independent responsibility for information security risk, governance, compliance, and assurance across the firm. The role partners with firm leadership, business units, legal, risk management, and technology teams to ensure security is integrated into business strategy, client service delivery, and emerging technologies, including artificial intelligence (AI).

• Participate as a member of the senior management team in governance processes of the organization’s security strategies.

• Lead strategic security planning to achieve business goals by prioritizing defense initiatives and coordinating the evaluation, deployment, and management of current and future security technologies using a risk-based assessment methodology.

• Develop and communicate security strategies and plans to executive team, staff, partners, customers, and stakeholders.

• Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits, and enhancements.

• Develop, implement, maintain, and oversee enforcement of policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.

• Establish security architecture, governance, and risk management standards for the evaluation, acquisition, implementation, and operation of technology solutions across the firm.

• Ensure security, privacy, compliance, and resiliency requirements are incorporated into the selection and deployment of enterprise applications, cloud services, infrastructure, and emerging technologies.

• Provide security oversight and risk assessment for major technology initiatives, vendor relationships, and strategic business investments.

• Define security requirements and approval processes for new technologies to ensure alignment with BPM's risk appetite, client commitments, and regulatory obligations.

• Pa…