Lead, Business Risk Management (BISO)

Bridgewater Associates•Westport, CT

9d•$225,000 - $375,000•Hybrid

About The Position

The Business Information Security Officer (BISO) is a key component of Bridgewater's strategy of forward-deploying security directly into the business. The BISO is an individual contributor role driving cross-functional teams, who is required to understand, communicate, and help mitigate the security risks of one or more Bridgewater departments. This role demands a broad understanding of security risk analysis and audit, security controls across physical, staff, tech, and business domains, as well as security operations and management. The ideal candidate will have deep expertise in one or more of these areas. This role offers a unique opportunity for a dynamic, independent individual to help Bridgewater build and run a world class security program.

Requirements

Ideally 5-10 years of security risk and internal audit experience, ideally in the financial services industry. A background in consulting, Information Security, operations, or fund administration is also favorable.
In depth knowledge of fundamental security principles, risk management, internal control principles, process control/improvement, risk, DR/BCP, security and regulatory compliance.
Experience successfully driving projects in collaboration with multiple stakeholders.
Experience implementing information security and risk management frameworks at department and enterprise levels.
Effective verbal and written communication and skills.
Effective relationship-building skills.
Ability to synthesize data and express findings at both strategic and tactical levels.
Analytical thinker with common sense.
Adaptable to change and ambiguity.
Proactively seeks appropriate training to further enhance client/ market/ industry knowledge.

Nice To Haves

Working knowledge of the global capital markets, products, processes, systems, regulations, and securities operations preferred.
CISSP, CISM, or CISA certification preferred.
Solid working knowledge of NIST 800-53 and ISO 27001/27002; Basel II, COSO, and/or ISO 31000 preferred.

Responsibilities

Act as a security liaison between the Security Team and one or more Bridgewater departments
Understand and communicate the security risk of those departments
Ensure key controls are in place and operational
Provide departments with security tools, resources, and training