Chief Information Security Officer (CISO)
Houlihan Lokey · Information Technology
Houlihan Lokey is hiring a Chief Information Security Officer in New York (the posting also lists Los Angeles). The CISO owns the firm's information security strategy, operating model, budget, and multi-year roadmap, and is the firm's senior voice on security with executive management, the audit committee, and the Board.
What the role covers
- Own the firm's information security strategy, operating model, budget, and multi-year roadmap, grounded in a risk-based assessment against the NIST Cybersecurity Framework.
- Deliver risk-based reporting to senior management, the audit committee, and the Board, and lead the firm's cybersecurity governance forum.
- Direct security operations with the firm's managed detection and response and SOC providers, including SIEM modernization and 24/7 incident response.
- Own identity and access management, including multi-factor and passwordless authentication, privileged access, and least-privilege access models.
- Ensure compliance with regulatory, privacy, and client contractual requirements, and lead responses to audits, regulator inquiries, and client due diligence.
What they ask for
15+ years of progressive information security experience, including at least 5 years leading an enterprise security function in a global, regulated environment. Demonstrated ownership of a full security program built or matured against a recognized framework such as the NIST Cybersecurity Framework or ISO 27001. Bachelor's degree in Information Technology, Computer Science, or a related field; master's degree or MBA preferred.
Free CIOsurge subscribers apply straight through to the Houlihan Lokey careers page (job ID R3712). Details are from the employer posting; check it for the full description.
See every open IT and security role on the CIOsurge job board →