Senior Director, Information Security

Join a team that values your ambition and empowers your growth

At Corient, we help high- and ultra-high-net-worth individuals and families to enjoy a full life, while enabling them to preserve their wealth for future generations, and provide for the people, causes and communities they care about. We focus on exceeding expectations, simplifying lives, and establishing legacies that last for generations. We are always looking for talented and motivated individuals to join our team. If you want to work for a company that values your contributions and supports your growth, we would like to meet you.

We are seeking an experienced Senior Director of Information Security to enhance and expand Corient’s Governance, Risk, and Controls (GRC) program.

This individual will be part of the Cybersecurity senior leadership team and will report to the CISO of Corient.  The ideal candidate will be responsible for partnering with the Corient CISO to establish and sustain a comprehensive GRC framework, controls model, execution methodology, and accompanying technology to ensure adherence of Corient Cybersecurity policies and standards.  You will build and oversee a high-performing team to monitor, detect, and respond to Cybersecurity risks identified through periodic and ongoing controls assurance, and driving initiatives that align with industry best practices and business requirements.

Responsibilities ​

• Strategic Leadership: Deliver thought leadership and industry expertise for all capabilities within the Cybersecurity GRC pillar.
• Team Management: Recruit, lead, and mentor a team of cybersecurity GRC professionals, focusing on Key Risk Indicators, cybersecurity controls monitoring, third-party risk management, cybersecurity due diligence requests, business continuity and disaster recovery, security training and awareness, and more. 
• Stakeholder Engagement: Collaborate and partner across Compliance, Cybersecurity, Legal, Privacy, Technology, and external partners to extend and operationalize our Cybersecurity Policies and Standards, with associated controls.
• Third-Party Risk Management: Extend and operationalize our third-party due diligence processes for new vendor onboarding and ongoing monitoring of potential risks, including consideration of platforms and/or tools appropriate to enhance this program.
• Policies and Standards: Extend and maintain a comprehensive set of cybersecurity policies and standards, aligned against industry standards (e.g., NIST, CIS, ISO) and compliance frameworks (e.g., SOC-2) appropriate for our industry and geography.
• Cybersecurity Controls Governance: Extend and operationalize our enterprise controls monitoring framework against industry standards (e.g., NIST, CIS, ISO) as well as Corient cybersecurity policies and standards.
• Risk Metrics and Analytics: Extend and operationalize executive-level reporting of priority cybersecurity risks within the organization, manage a cybersecurity risk register and exceptions process, and partner with stakeholders across the organization for timely risk-based remediation of priority concerns.
• Cybersecurity Training and Awareness: Enhance our overall cybersecurity awareness program, including email phishing, employee awareness campaigns, and timely and relevant communications related to cybersecurity trends.
• Business Continuity and Emergency Response: Enhance our overall plans, practices, and procedures related to workplace safety (in conjunction with Corient Real Estate and Human Resources), emergency employee notifications, and business continuity of critical and essential Corient business functions.

Qualifications & Requirements

Education and Experience 

• Bachelor's degree in Cybersecurity, Computer Science, IT Risk Management, or a related field (preferred, but not required). 
• 10+ years of proven experience in cybersecurity roles, including 5 years of leadership with demonstrated increasing responsibility.

Skills and Certifications 

• In-depth knowledge of modern cyber security industry standards such as NIST, ISO 27001, and CIS-18 and compliance frameworks such as SOC-2. 
• Strategic thinker with an analytical mindset, adept at problem-solving and decision-making.
• Certifications such as CISA, CISM, CRISC or similar are highly desirable. 
• Excellent leadership, communication, and project management skills. 

This position description is intended to provide a general overview of the expectations and responsibilities of this position and may not include all tasks that may be assigned. As the nature of business demands change, so ma