Chief Information Security Officer

The TCW Group • New York, NY

10d • $275,000 - $400,000 • Hybrid

About The Position

The Chief Information Security Officer (CISO) reports to the Head of Engineering Solutions and oversees the day-to-day operations of TCW’s Information Security team. The role leads the development, implementation, and maintenance of the Information Security Program and serves on the incident response team. This is a hands-on leadership position combining security practice with strategic planning, including monitoring controls and developing and improving security strategies. The CISO communicates across business and technology functions and at all organizational levels.

Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent work experience.
• At least 10 years of experience in the information security industry.
• At least 7 years in a senior leadership role directly supervising staff.
• Advanced knowledge of security practices such as vulnerability and patch management, incident response, and endpoint protection.
• Familiarity with industry frameworks such as NIST CSF, ISO 27001, and SOC 2 Type II.
• Strong technical foundation in security architecture, threat modeling, vulnerability assessments, and cloud security.
• Strong communication skills for working with business leaders, clients, team members, engineers, regulators, and legal counsel.
• Strategic problem-solving and decision-making abilities.
• Strong leadership and interpersonal skills.

Nice To Haves

• Experience working in the financial services industry.

Responsibilities

• Manage and lead the firm’s information security function.
• Improve and develop security processes and technology platform strategies.
• Plan and execute the company’s information security strategy.
• Operate and monitor security controls day to day.
• Design and implement a cloud and application security program.
• Partner with stakeholders when onboarding solutions to ensure appropriate controls are available and enabled.
• Drive vulnerability remediation and reporting.
• Select and implement appropriate technology solutions.
• Serve as Incident Commander, leading and coordinating incident response when appropriate.
• Automate security operations to improve detection and response capabilities.
• Develop training plans and mentorship opportunities to promote internal capabilities.
• Monitor the threat landscape for emerging threats and advise stakeholders on appropriate actions.
• Ensure alignment with NIST CSF 2.0 maturity targets.
• Manage information security risk and maintain compliance with applicable regulatory requirements.
• Implement continuous monitoring to identify and respond to changes in the company’s risk posture and communicate with control owners.
• Collaborate with peer organizations to share best practices and strengthen the firm’s information security program.
• Promote secure design patterns and embed security in the company through an agile software development process.
• Provide security subject matter expertise to internal stakeholders and advise on and execute the company’s security strategy.
• Lead data protection initiatives to protect the confidentiality, integrity, and availability of company and customer information.

Benefits

• Discretionary bonus.
• Medical coverage.
• Dental coverage.
• Vision coverage.
• Retirement benefits.
• Paid time off.
• Comprehensive benefits package designed to support employees and their families, health and wellbeing, and long-term financial security.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive