> Markdown version of [/jobs/ext/3457840-information-security-officer](https://www.wearedevelopers.com/jobs/ext/3457840-information-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Officer - **Company:** Irg Ltd - **Location:** New York, NY, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Software as a Service, Cloud Computing, Cyber Security, Identity and Access Management, Information Technology Audit, Microsoft Office, Microsoft PowerPoint, Secure Coding, Software Vulnerability Management, Data Logging - **Published:** September 11, 2026 - **Apply:** https://www.thejobnetwork.com/job/37b8ccb8-4ce5-4213-8c42-ac6a9dac9433/information-security-officer ## About the Role 1. Certification in Information Security (ISC2 CISSP or ISACA CISM) required. 2. 8+ years of Information Security related experience, IT Audit experience, preferred. 3. Strong knowledge of Information Security principles, terminologies, and technologies required. 4. Strong knowledge of Information Risk Management framework and principles required. 5. Ability to analyze and design information security policy, procedures, and activities required. 6. Detailed Knowledge and expertise in Technology Risk Assessments and Risk Analysis required. 7. Excellent written and verbal communication skills, required. 8. Strong skills and prior experience with Microsoft Office (PowerPoint, Excel, and Word) required. 9. Strong project management and people management skills required. 10. Prior experience developing Risk Management and Oversight Frameworks for Systems Automation, AI, and other novel technologies. 11. Prior experience in the Financial Services Industry preferred, especially in a FBO with exposure to NYDFS and FRBNY regulations. ## Description The Information Security Officer (ISO) serves as the Chief Information Security Officer's principle operational delegate. The ISO is responsible for leading the day-to-day governance, administration, and continuous improvement of the Americas Division's Information Security and Cybersecurity program. Working under the direction of the CISO, the ISO translates the Americas Division's information security strategy, risk appetite, regulatory obligations, and enterprise requirements into an effective operating program. Your Duties and Responsibilities: 1. Administer and continuously improve the Americas Division information security and cybersecurity program, including policies, standards, procedures, control requirements, and evidence repositories. 2. Translate CISO direction, enterprise security requirements, Americas Division risk appetite, and regulatory expectations into actionable objectives, work plans, control requirements, and measurable deliverables. 3. Maintain Americas Division information security policies and procedures lifecycle, including periodic review, stakeholder coordination, approval tracking, publication, and exception management. 4. Assist the CISO to coordinate with Head Office and US regional affiliate information security teams to ensure that the US-level Information Security risk framework is appropriately adhered to and evidenced. 5. Coordinate with security operations, IT, Legal, Compliance, BCP, Head Office, and other relevant stakeholders during cybersecurity incidents, as part of the Incident Response Team. 6. Monitor relevant changes in laws, regulations, supervisory expectations, industry practices, and emerging threats and recommend updates to the Americas Division cybersecurity and information security program. 7. Oversee and challenge the information security risk assessments as performed by the Risk Management Section of IRG. This includes risk assessments for new products, material technology changes, Cloud/SaaS services, third party engagements, Artificial Intelligence use cases, and other material business initiatives. 8. Oversee the effectiveness of key cybersecurity controls, including identity and access management, privileged access, vulnerability management, systems patching, endpoint protection, logging and monitoring, data encryption, secure configuration based on best practices, secure development lifecycle, backup and recovery, as well as data protection. 9. Coordinate risk-based control testing and evidence collection, identify control deficiencies, validate remediation, and escalate material or overdue issues to the CISO and appropriate Senior Management. Administer the information security exception process, including documentation of business justification, compensating controls, expiration dates, ownership, risk ratings, and required approvals. 10. Ensure that material residual risk decision and risk acceptances are escalated to the CISO and/or other authorized risk acceptance authorities in accordance to policy. 11. Coordinate the Americas Division's operational readiness for applicable cybersecurity and information security regulatory obligations. 12. Prepare and maintain documentation, risk assessments, testing records, policy evidence, incident records, third party evidence, and other artifacts needed to support regulatory examinations, internal/external audits, and management reviews. 13. Track regulatory and audit findings, drive remediation governance, validate closure evidence, and escalate overdue or high-risk findings. 14. Produce timely, accurate, and actionable cybersecurity management information for the CISO, including key risk indicators, control metrics, significant incidents, vulnerabilities, exceptions, audit issues, third-party risks, training results, and remediation status. 15. Support the CISO in preparing periodic and annual cybersecurity program reports for Senior Management, governing bodies, and other stakeholders. 16. Assist the CISO with the management of all matters related to Information Security and Information Risk Management, including providing guidance to other IRG Department members. 17. Performs other duties and responsibilities as assigned by management.