Information Security Officer

About the role

The Vulnerability Management Lead drives the AMER region’s vulnerability and configuration management program for a financial services organization. This senior‑level position requires strong communication, influence, and the ability to translate technical findings into actionable business decisions.

Key responsibilities

• Lead the AMER vulnerability and configuration management programs, acting as the primary expert and point of contact.
• Oversee discovery, evaluation, and implementation of vulnerability scanning, patching, configuration reviews, and penetration testing.
• Present program status and improvement proposals to senior management on a quarterly basis.
• Develop annual roadmaps aligned with overall InfoSec and business objectives.
• Conduct detailed vulnerability assessments, recommend corrective actions, and monitor remediation.
• Sign‑off on improvement recommendations arising from project work.
• Draft and publish communications on emerging threats.
• Enhance reporting frameworks to deliver regular security metrics to CISO, COO, CIO, and CTO.

Required profile

• Excellent written and verbal communication skills in English.
• Proven ability to influence stakeholders across GBSU, GTS, SG CERT, ISR, and global teams.
• Strong technical analysis and process‑improvement capabilities.
• Experience presenting complex security topics to senior leadership.

Required skills

• Vulnerability scanning
• Patch management
• Configuration review
• Penetration testing
• Risk assessment frameworks (e.g., NIST)
• Knowledge of NYDFS 500, FINRA, and SEC regulations