> Markdown version of [/jobs/ext/1885233-cyber-security-advisory-lead](https://www.wearedevelopers.com/jobs/ext/1885233-cyber-security-advisory-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Advisory Lead

- **Company:** Mizuho Financial Group, Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $150,000.0 - $215,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems Security Architecture Professional
- **Published:** August 1, 2026
- **Apply:** https://mizuho.wd1.myworkdayjobs.com/mizuhoamericas/job/NYC-1285/Cyber-Security-Advisory-Lead_R7223-1

## About the Role

* Extensive experience in security advisory services or risk leadership within financial services.
 * Deep expertise in threat modeling, secure architecture, and risk assessment methodologies.
 * Strong knowledge of regulatory and compliance frameworks and their application to security.
 * Proven experience advising on M&A activities, strategic programs, and third-party/vendor risk.
 * Exceptional stakeholder engagement, communication, and influencing skills.

## Description

In this role you will serve as a trusted advisor to business and technology partners across the organization, embedding security expertise into decision-making from strategy through delivery. You will provide advisory services for risk decisions, secure-by-design guidance, and regulatory mapping, and deliver security input into strategic programs, mergers and acquisitions, and vendor due diligence to ensure risk-informed, business-aligned outcomes., Trusted Advisory & Stakeholder Partnership

 * Act as the primary security advisor to business, product, and technology leadership.
 * Build trusted relationships that position security as an enabler of business objectives.
 * Translate complex security concepts into clear, actionable guidance for technical and non-technical stakeholders.

Risk Advisory Services & Secure-by-Design Guidance

 * Provide advisory services on risk considerations for new initiatives, products, and architectural decisions.
 * Embed secure-by-design principles across solution design and development lifecycles.
 * Advise teams on control selection, residual risk, risk acceptance, and treatment options.

Security Assessment

 * Lead security assessments and design reviews across applications, platforms, and infrastructure.
 * Identify and prioritize security weaknesses, control gaps, and design risks.
 * Recommend proportionate, risk-based mitigations aligned to the organization's risk appetite.

Regulatory Mapping & Compliance Alignment

 * Map regulatory and compliance requirements to security controls and business processes.
 * Advise on the security implications of evolving regulatory obligations.
 * Partner with risk, legal, compliance, and audit teams to support examinations and assessments.

Strategic Programs, M&A & Vendor Due Diligence

 * Provide security input into strategic programs and enterprise-wide initiatives.
 * Lead security due diligence for mergers, acquisitions, and divestitures.
 * Assess third-party and vendor security posture and advise on risk-based onboarding decisions.
 * Build and maintain ongoing security partnerships with key third parties and vendors to strengthen the extended risk posture.

Leadership & Collaboration

 * Lead and develop a high-performing security advisory services practice.
 * Partner closely with security engineering and operations teams to align guidance with execution.
 * Champion a culture of security awareness and shared accountability across the enterprise.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Make it simple, using generative AI to accelerate learning](https://www.wearedevelopers.com/videos/969-make-it-simple-using-generative-ai-to-accelerate-learning)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Don’t shoot yourself in the foot.](https://www.wearedevelopers.com/videos/580-don-t-shoot-yourself-in-the-foot)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)