Senior Vice President, FRS System IT Ops and Policy Business Information Security Officer (BISO)
About The Position
The System IT Ops and Policy Business Information Security Officer (BISO) is responsible for information security across the Federal Reserve System’s System IT Ops and Policy portfolios. The role reports directly to the System Chief Information Security Officer (CISO), serves on the Office of the CISO (OCISO) leadership team, and advises the System CISO. The BISO works with System stakeholders and delivery partners to mature consistent, business-aligned information security practices and support efficient, effective, and secure technology services. The role spans the Infrastructure, Platforms & Operations portfolio; the Information Security & Policy portfolio; the Enterprise Architecture, Data & Innovation portfolio; and the Business of IT portfolio. The BISO sets and leads security strategy and execution, provides practical security advice to business and technology leaders, and helps ensure technology services are secure, resilient, reliable, and aligned with business needs and System standards. The position is full-time and onsite at a location within reasonable commuting distance, as defined by the employing Reserve Bank. Business travel may be up to 25%.
Requirements
- Bachelor’s degree in business, technology, information security, or a related field, or equivalent work experience.
- 10 or more years of progressive experience in technology, information security, and people leadership.
- Experience partnering with product and engineering teams on secure SDLC and CI/CD.
- Deep technical expertise in securing complex solutions and awareness of emerging IT industry trends.
- Ability to set strategic direction and deliver on established goals.
- Collaborative leadership style balanced with decisive action when required.
- Ability to build and integrate teams across organizational cultures and develop and maintain relationships with diverse constituents.
- Ability to manage competing priorities, diverse perspectives, and ambiguity.
- Strong understanding of the mission, vision, and operational requirements of System IT Ops and Policy and their application to security design, management, and operations.
- Strong communication skills, including the ability to explain complex technical topics to a wide range of stakeholders.
- Ability to manage geographically diverse and dispersed teams.
- Ability to manage diverse stakeholders and support effective decision-making and prioritization.
- Business travel up to 25%.
- United States citizenship is required.
- Employees in the position are subject to FBI fingerprint/criminal background and Patriot Act/OFAC watch list checks at least once every five years. Employment offers are contingent on a two-phase security screening, which includes a physical examination and drug screening, reference checks, security investigation, and additional risk-based screening depending on the position’s sensitivity.
Nice To Haves
- Certified Information Systems Security Professional (CISSP) or comparable certification.
Responsibilities
- Serve on the OCISO leadership team and advise the System CISO on maturing consistent and effective, business-aligned information security practices.
- Contribute to the vision, strategy, values, and priorities of the System IT Ops and Policy portfolios.
- Partner with stakeholders to develop, implement, and execute a comprehensive information security strategy for the System IT Ops and Policy portfolio, focused on measurable and sustainable results.
- Lead information security strategy and execution across the System IT Ops and Policy portfolios, collaborating with OCISO and delivery partners to provide secure, resilient, and reliable services.
- Provide practical, proactive security advice about System IT Ops and Policy technology solutions to business and technology leadership.
- Build relationships with key stakeholders and external partners to encourage contemporary thinking, complementary actions, and avoidance of duplicative services.
- Drive results and proactively manage change within highly matrixed and virtual teams.
- Collaborate with peers to develop security and technical resilience strategy and vision aligned with business needs and System standards, and translate them into actionable plans and business results.
- Build and lead teams, develop talent, and lead an AI-savvy security team in an agile technology environment.
- Assess risk and establish risk tolerance while balancing business needs and priorities against potential material loss.
- Rethink business models and established practices; advocate for, anticipate, and orchestrate change.
- Experiment and lead innovation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Executive
