Chief Information Security Officer

FactSet Research Systems Inc. is a global provider of integrated financial information, analytical applications and industry-leading services for investment and corporate communities. As a publicly traded company (NYSE:FDS | NASDAQ:FDS) recently added to the S&P 500 index, FactSet delivers superior content, analytics, and flexible technology to help more than 207K users see and seize opportunity sooner. For over 40 years, the company has served financial professionals, which include portfolio managers, investment research professionals, investment bankers, risk and performance analysts, wealth advisors and corporate clients. FactSet gives our clients the edge to outperform with informed insights, workflow solutions across the portfolio lifecycle, and industry-leading support from dedicated specialists.  The company has been included in FORTUNE's 100 Best Companies to Work For, Best Workplace in the United Kingdom and France and most recently Best Places to Work 2023 by Glassdoor. 

Job Description: 

The Chief Information Security Officer (CISO) is crucial in safeguarding FactSet's information, digital assets, technology and data. The CISO is responsible for developing, implementing, and leading a robust cybersecurity program, which includes policies, standards, and procedures to protect against unauthorized access, modification, or destruction. 

The CISO works closely with senior management, the CTO, and various business units to create a holistic information security strategy and vision aligned with FactSet's business objectives and regulatory requirements. The role involves overseeing risk assessments, incident response, data protection, and staff training programs in information security awareness. 

Responsibilities: 

·       Design and oversee the implementation of an enterprise-wide information security strategy that addresses modern challenges such as artificial intelligence, cloud security, data privacy, and international cybersecurity regulations, while appropriately balancing risk, cost and operational efficiency. 

·       Direct the development and enforcement of information protection policies, including network and software security architectures, data handling procedures, and user access controls. 

·       Spearhead the Information Security Management System (ISMS) and ensure alignment with ISO/IEC 27001, GDPR, and other relevant standards. 

·       Conduct and oversee regular security assessments, penetration tests, and tabletop exercises to evaluate the effectiveness of security measures. 

·       Foster a culture of vigilance and security awareness across the organization.  

·       Lead the organization's responses to IT security incidents from identification through to resolution and post-mortem analysis, including managing any necessary communications with stakeholders and external parties. 

·       Collaborate with HR to develop a top-tier cybersecurity team and support s their continuous development. 

·       Provide updates to the Board of Directors and executive management on the state of the information security program, emerging risks, and ongoing initiatives. 

·       Continuously update FactSet's security practices and policies to accommodate new technologies and threats, especially in areas such as Generative AI, machine learning, etc. 

·       Serve as the primary contact for external auditors and help coordinate compliance activities. 

·<