Business Information Security Officer (BISO)

Mizuho•New York, NY

1d•$300,000 - $350,000•Hybrid

About The Position

The Business Information Security Officer (BISO) for Mizuho Americas is the strategic bridge between the central cybersecurity team and the business. They ensure that security initiatives align with business objectives, embedding security-first practices directly into daily operations without compromising agility or innovation. As a senior leader, the BISO collaborates with business units to integrate security into operations, supervises the execution of the cybersecurity strategy, and serves as the liaison within the financial services industry. This role is essential for maintaining Mizuho’s reputation for security and compliance while fostering resilience and innovation.

Requirements

Proven experience as a Business Information Security Officer (or similar) within the financial services industry, ideally with exposure to Equities and systematic trading environments.
Deep understanding of information security principles, frameworks, and best practices, including relevant financial industry regulations (e.g., SEC, FINRA, etc.).
Strong analytical skills to assess complex security risks, translate technical details into business impact, and develop pragmatic mitigation plans.
Exceptional communication and stakeholder management skills, with proven ability to engage and influence senior business and technology leaders.
Experience leading security initiatives, managing projects, and driving cross-functional collaboration to achieve secure outcomes.
Familiarity with key security technologies and controls, including network security, application security, IAM, data protection, and incident response.
Strong problem-solving and decision-making abilities, balancing security needs with business objectives to enable secure innovation.
Relevant certifications (CISSP, CISM, etc.)
Bachelor's degree in Computer Science, Information Security, or a related field.
Commitment to the highest ethical standards

Responsibilities

Serve as the primary point of contact and trusted advisor on information security matters for senior business and technology leaders within the various line of business.
Execute against a comprehensive information security strategy aligned with firm standards, business objectives, regulatory requirements, and industry best practices.
Conduct risk assessments and provide recommendations to mitigate security risks and vulnerabilities within the organization.
Collaborate with cross-functional teams to ensure that security controls are implemented and maintained throughout the organization.
Engage with business stakeholders to understand their security needs and requirements and provide guidance on security-related decisions.
Participate in the evaluation and selection of security technologies and solutions to meet organizational needs.
Conduct security awareness and training programs to educate employees on information security best practices and policies.
Oversee remediation activities and ensure timely and effective resolution to information security risks across the business and technology functions that support the business.
Monitor and analyze security metrics and reports to identify trends, potential threats, and areas for improvement.
Stay up to date with emerging security threats, industry trends, and regulatory changes relevant to the financial services sector.