CRO - Information Security & Risk Oversight Lead

The energy of a newsroom, the pace of a trading floor, the buzz of a recent tech breakthrough; we work hard, and we work fast - while keeping up the quality and accuracy we're known for. It's what keeps us inventing and reinventing, all the time. Our culture is wide open, just like our spaces. We bring out the best in each other through collaboration. Through our countless volunteer projects, we also help network with the communities around us, too. You can do amazing work here. Work you couldn't do anywhere else. It's up to you to make it happen.  
 
About the Role:  
We’re looking for an Information Security Risk Oversight Lead who can translate cybersecurity risk into executive insight and action. Sitting in the Company’s Second Line of Defense, the Chief Risk Office and reporting directly to our Head of Technology Risk, you will provide independent oversight and credible challenge across the firm’s enterprise-wide information security program. Operating at the intersection of technology, risk management, cybersecurity, governance, and strategy, you will partner with the Chief Information Security Office, Engineering, and CTO teams to ensure cyber risks are appropriately identified, measured, monitored, and aligned with the firm’s risk appetite. The "so what" is critical: your oversight will enable leadership to understand not only what the risks are, but whether they are being managed effectively—and where decisive action is required to strengthen the firm’s overall security posture.  
 
Key Responsibilities  
 
* Serve as the primary Second Line risk advisor for cybersecurity -related risks and lead independent oversight and credible challenge of First Line of Defense activities. 

*Identify and measure threat-actor initiated risks and risk scenarios that may impact the confidentiality, integrity, and availability of information systems. 

* Evaluate the design and operating effectiveness of security controls, particularly across complex, high-risk, or enterprise-scale technology initiatives. 

*Quantify risk and control posture to support executive decision-making through scenario analysis and metrics (e.g., KRIs, KPIs, SLA/SLOs