Principal Business Information Security Officer (BISO)

Information Security is essential to what we do at LPL, from protecting our employees, our advisors and their clients. As a Principal Business Information Security Officer (BISO) you will join a growing organization responsible for securing our advisors and their clients, enabling the business to innovate while balancing the need to reduce risk. You will partner with business and relevant stakeholders to securely help them meet their goals and objectives, provide information security and risk management consultation on initiatives, programs and projects and collaborate and innovate with other security groups within LPL. You will focus on securing LPL's key products and business growth strategies., * Develop and maintain in depth understanding of business unit processes, systems, technologies, data, customers, consumers, partners

• Become an expert in assigned products including the design, security profile and risks
• Partner with Compliance, Legal, and Technology resources to achieve effective working relationships that can further the effectiveness of the Information Security program
• Interpret and implement information security policies and standards specific to the business unit you support.
• Participate and influence Cloud and Native Architecture principles, APIs, as well as appropriate enterprise Data handling practices.
• Communicate and oversee security solutions required to meet business objectives
• Proactively identify noncompliance and areas of potential improvement, and facilitate development and deployment of standard solutions
• Provide regular and timely reporting on the status of cyber security across the business unit
• Provide escalation path for security issues, incidents and inquiries
• Provide Cyber Security Guidance across functions.
• Drive remediation activities across the business unit.

We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and are able to execute in a way that encourages creativity and continuous improvement., * Bachelor's degree

• 10+ years in Cyber Security, Technology Risk Management, Cyber-security Program Management or a related field
• 3+ years guiding all aspects of cyber-security risk including - identification, synthesis, quantification, and remediation strategies.
• Experience working in Agile or Waterfall methodology and a deep understanding of phased approaches to the Software Development Life Cycle
• Working knowledge of:

• Cloud computing architectures and the associated security designs and challenges
• Common DevSecOps processes and technologies and how to effectively harden them
• Common web application development technologies along with tools and processes to enable teams to develop safely
• Data management and security principles applicable to financial services and modern architectures.
• API security

Core Competencies:

• Strong executive presence and ability to engage with customers regarding security (e.g. Executive Briefings and incident communications). Ability to communicate clearly and effectively with both technology/development and business partners
• Strong relationship, team building and facilitation skills
• Ability to translate technical/security issues to business users
• Proven ability to articulate the why and to enable fact-based decision making.
• Ability to independently influence others to achieve objectives
• Ability to deal with the ambiguity associated with working in a fast paced and changing environment
• Experience working in a matrix model, as the BISO supports operational and transformational efforts for a given region or organizational function

Preferences:

• Bachelor's degree in computer science or information systems
• Certified Information System Security Professional (CISSP) or Certified in Risk and Information Systems Control (CRISC) certifications preferred

Pulled from the full job description

• Health insurance
• 401(k) matching
• Paid time off
• Stock options
• Volunteer time off, Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards package is highly competitive, designed to support your success at work, at home, and at play - such as 401K matching, health benefits, employee stock options, paid time off, volunteer time off, and more. Your recruiter will be happy to discuss all that LPL has to offer!

LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace(6) , LPL supports over 32,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $2.3 trillion in brokerage and advisory assets on behalf of approximately 8 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses. For further information about LPL, please visit www.lpl.com. At LPL, independence means that advisors and institution leaders have the freedom they deserve to choose the business model, services, and technology resources that allow them to run a thriving business. They have the flexibility to do business their way. And they have the freedom to manage their client relationships, because they know their clients best. Simply put, we take care of our advisors and institutions, so they can take care of their clients.