> Markdown version of [/jobs/ext/2677378-avp-information-security-strategy-banking](https://www.wearedevelopers.com/jobs/ext/2677378-avp-information-security-strategy-banking). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AVP Information Security Strategy (Banking)

- **Company:** ACG Resources
- **Location:** New York, NY, United States
- **Salary:** $65,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management, Information Technology, ISO/IEC 27002
- **Published:** September 2, 2026
- **Apply:** https://www.acgresources.com/job/15204

## About the Role

* Bachelor's degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required
 * Minimum 5 years of work experience in Financial services Risk Management, Audit, IT/IS Operations, or other relevant functions
 * Minimum 3 years of experience in developing and executing IT/IS Risk programs, projects, and policies
 * Minimum 1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks
 * Strong program, frameworks, project management development, implementation, and maintenance skills
 * Sound and practical IT/IS risk management and program knowledge
 * Familiarity with IT/IS Risk Management regulations, standards, and frameworks including NIST, ISO27002, FFIEC Guidelines, etc.
 * CISSP/CRISC/ or IT related certifications preferred

## Description

Governance

 * Establish and maintain Information Security policies and procedures
 * Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines

Stragtegy & Programs

 * Coordinate Information Security strategy in alignment with the Bank's strategy
 * Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives
 * Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary

Risk & Compliance

 * Establish and enhance a TISR framework that consists of the appropriate components to effectively manage TISR
 * Conduct risk assessments of TISR for Projects, Third-Party, New Activities and Applications
 * Prepare response evidence for IT/IS related regulatory exams
 * Recommend changes to policy, process or procedures to align with OCC and other federal guidelines and regulations

Metrics & Reporting

 * Manage all metrics and reporting for CISO


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Unleashing the power of AI to prevent financial crime](https://www.wearedevelopers.com/videos/1088-unleashing-the-power-of-ai-to-prevent-financial-crime)
- [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green)

## Related Articles

- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)