Cyber Security Advisory Lead

Mizuho•New York, NY

5d•$150,000 - $215,000•Hybrid

About The Position

Join Mizuho as the Cyber Security Advisory Lead! In this role, you will serve as a trusted advisor to business and technology partners across the organization, embedding security expertise into decision-making from strategy through delivery. You will provide advisory services for risk decisions, secure-by-design guidance, and regulatory mapping, and deliver security input into strategic programs, mergers and acquisitions, and vendor due diligence to ensure risk-informed, business-aligned outcomes.

Requirements

Extensive experience in security advisory services or risk leadership within financial services.
Deep expertise in threat modeling, secure architecture, and risk assessment methodologies.
Strong knowledge of regulatory and compliance frameworks and their application to security.
Proven experience advising on M&A activities, strategic programs, and third-party/vendor risk.
Exceptional stakeholder engagement, communication, and influencing skills.

Responsibilities

Act as the primary security advisor to business, product, and technology leadership.
Build trusted relationships that position security as an enabler of business objectives.
Translate complex security concepts into clear, actionable guidance for technical and non-technical stakeholders.
Provide advisory services on risk considerations for new initiatives, products, and architectural decisions.
Embed secure-by-design principles across solution design and development lifecycles.
Advise teams on control selection, residual risk, risk acceptance, and treatment options.
Lead security assessments and design reviews across applications, platforms, and infrastructure.
Identify and prioritize security weaknesses, control gaps, and design risks.
Recommend proportionate, risk-based mitigations aligned to the organization's risk appetite.
Map regulatory and compliance requirements to security controls and business processes.
Advise on the security implications of evolving regulatory obligations.
Partner with risk, legal, compliance, and audit teams to support examinations and assessments.
Provide security input into strategic programs and enterprise-wide initiatives.
Lead security due diligence for mergers, acquisitions, and divestitures.
Assess third-party and vendor security posture and advise on risk-based onboarding decisions.
Build and maintain ongoing security partnerships with key third parties and vendors to strengthen the extended risk posture.
Lead and develop a high-performing security advisory services practice.
Partner closely with security engineering and operations teams to align guidance with execution.
Champion a culture of security awareness and shared accountability across the enterprise.