Senior Vice President, FRS District IT & Corporate Services Business Information Security Officer (BISO)
About The Position
The District IT & Corporate Services Business Information Security Officer (BISO) is responsible for information security across the District IT & Corporate Services portfolio within the Federal Reserve System. The portfolio includes Human Resources, Legal, Shared Administrative Services, Finance, Procurement, Audit, Law Enforcement, and Facilities. The BISO partners with the District IT & Corporate Services CIO, business-line directors, and System leadership to manage security and enable business strategies securely. The role reports directly to the System Chief Information Security Officer (CISO), with a matrix reporting relationship to the District IT & Corporate Services Chief Information Officer (CIO). As a member of the OCISO leadership team and advisor to the System CISO, the BISO contributes to the vision, strategy, values, and priorities of the portfolio and helps improve the consistency and effectiveness of business-aligned information security practices across the System. The BISO leads development and execution of a comprehensive portfolio security strategy, working with OCISO and System IT delivery partners to provide secure, resilient, and reliable services. The role gives practical, proactive security advice to business and technology leaders, builds relationships with internal and external stakeholders, manages risk and change, and develops a capable security team. The position is full-time onsite at a location within reasonable commuting distance as defined by the employing Reserve Bank, with business travel up to 25%. United States citizenship is required. Employment is contingent on completing the required two-phase security screening.
Requirements
- Bachelor’s degree in business, technology, information security, or a related field, or equivalent work experience.
- At least 10 years of progressive experience in technology, information security, and people leadership.
- Experience partnering with product and engineering teams on secure SDLC and CI/CD.
- Deep technical expertise securing complex solutions using modern approaches, with awareness of emerging IT industry trends.
- Strategic direction-setting capability and demonstrated ability to deliver on established goals.
- Collaborative leadership style, with ability to take decisive action when required.
- Ability to build and integrate teams across organizational cultures and maintain business relationships with diverse constituents.
- Ability to manage competing priorities, diverse perspectives, and ambiguity.
- Strong understanding of the mission, vision, and operational requirements of District IT & Corporate Services and their implications for security design, management, and operations.
- Strong communication skills, including ability to explain complex technical topics to a broad range of stakeholders.
- Ability to manage geographically diverse and dispersed teams.
- Ability to manage a diverse group of stakeholders and support effective decision-making and prioritization.
- United States citizenship.
- Ability to travel for business up to 25%.
- Successful completion of the required security screening, including physical examination and drug screening, reference checks, and security investigation; additional risk-based screening may apply.
Nice To Haves
- Certified Information Systems Security Professional (CISSP) or comparable certification.
Responsibilities
- Serve on the OCISO leadership team and advise the System CISO on improving the consistency and effectiveness of business-aligned information security practices.
- Contribute to the vision, strategy, values, and priorities for the District IT & Corporate Services portfolio.
- Partner with stakeholders to develop, implement, and execute a comprehensive information security strategy for the portfolio, focused on measurable and sustainable results.
- Lead information security strategy and execution across the portfolio, collaborating with District IT & Corporate Services, OCISO, and System IT delivery partners to deliver secure, resilient, reliable services.
- Provide practical and proactive security advice to business and technology leadership about technology solutions and decision-making.
- Build close relationships with key stakeholders and external partners to encourage complementary actions and avoid duplicative services.
- Drive results and proactively manage change in a highly matrixed and virtual team environment.
- Collaborate with peers to develop security and technical resilience strategy and vision aligned with business needs and System standards, translate that vision into plans, and deliver business results.
- Build strong teams, develop talent, and lead an AI-savvy security team in an agile technology environment.
- Assess risk and establish risk tolerance while balancing business needs and priorities against potential material loss.
- Rethink business models and established practices, advocate for and orchestrate change, and lead innovation.
- Manage geographically diverse and dispersed teams and facilitate stakeholder decision-making and prioritization.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Executive
