Chief Information Security Officer

Job not on LinkedIn

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $275k - $300k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BPM LLP

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💸 Finance

💼 Consulting

☁️ SaaS

Finance • Consulting • SaaS

BPM LLP is a large California-based accounting and consulting firm providing a wide range of services. These include assurance, advisory, tax, and IT consulting, with specialized expertise in areas like cybersecurity and risk advisory. The firm serves a diverse client base across multiple industries, including financial services, real estate, and technology. BPM is committed to delivering personalized service tailored to meet the specific needs of each client, facilitating business growth and compliance with industry regulations.

📋 Description

• Provide vision, leadership, and strategic direction for BPM's enterprise information security, cyber risk, privacy, and trust programs • Partner with the CIO and technology organization while maintaining independent responsibility for information security risk, governance, compliance, and assurance • Integrate security into business strategy, client service delivery, and emerging technologies, including artificial intelligence • Participate in senior management governance processes for security strategies • Lead strategic security planning and prioritize defense initiatives using risk-based assessment methodology • Develop and communicate security strategies and plans to executives, staff, partners, customers, and stakeholders • Assist with disaster recovery and business continuity plans, procedures, audits, and enhancements • Develop, implement, maintain, and enforce system security and user access policies and procedures • Establish security architecture, governance, and risk management standards for technology solutions • Ensure security, privacy, compliance, and resiliency requirements are incorporated into enterprise applications, cloud services, infrastructure, and emerging technologies • Provide security oversight and risk assessment for technology initiatives, vendors, and strategic investments • Define security requirements and approval processes for new technologies • Integrate security, privacy, and risk management into enterprise architecture, applications, infrastructure, and business processes • Establish and oversee physical security, access control, and facility protection standards • Develop and manage information security operating and capital budgets • Assess and advise on information security, privacy, and technology risks • Lead the development and performance of the information security team • Maintain strategic relationships with clients, regulators, vendors, and industry partners • Advise executive leadership on cybersecurity, privacy, AI, and emerging technology risks and opportunities • Lead cybersecurity incident response, crisis management, cyber recovery, disaster recovery, and business continuity activities • Lead executive communications and stakeholder engagement during significant security events • Conduct post-incident reviews and drive continuous improvement • Provide regular security and risk reporting to executive leadership, committees, and the Board of Directors • Translate technical risks into business impact, decision-making guidance, and measurable security outcomes • Oversee client trust, security assurance, security responses, attestations, and trust-center content • Establish governance frameworks for artificial intelligence, automation, and emerging technologies • Assess emerging technology risks and enable responsible innovation • Oversee BPM's third-party risk management program and vendor risk review processes

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, Business Administration, or related field • 10+ years leading information security and cyber risk programs • Deep knowledge of cybersecurity, risk management, cloud security, privacy, identity, and regulatory compliance • Experience presenting to executive leadership and boards • Experience leading incident response and crisis management • Experience with ISO 27001, SOC 2, privacy regulations, and client security assessments • Experience securing cloud, SaaS, ERP, and other business-critical platforms • Experience with AI governance and emerging technology risk management • CISSP, CISM, CRISC, CCSP, or similar certifications preferred • Experience in professional services, public accounting, financial services, legal, healthcare, or other highly regulated industries preferred • Excellent written and oral communication skills • Excellent interpersonal skills • Strong negotiating skills • Ability to present ideas in business-friendly and user-friendly language • Exceptionally self-motivated and directed • Keen attention to detail • Superior analytical, evaluative, and problem-solving abilities • Exceptional service orientation • Ability to motivate in a team-oriented, collaborative environment • On-call availability and periodic overtime • Dexterity of hands and fingers to operate a computer keyboard, mouse, and other computing equipment

🏖️ Benefits

• Total rewards package including flexible work arrangements, personalized benefit structures, and financial compensation options • Flexible work arrangements • Accommodations available on request for candidates with disabilities • Periodic overtime compensation implied by the total rewards package