MD Senior BISO

Who we are looking for The MD , Business Information Security Officer (BISO) serves as a senior cybersecurity executive within the first line of defense, responsible for providing both strategic cyber risk leadership and tactical cyber advisory services across the enterprise. This role acts as the primary cybersecurity advisor to executive management, business leadership, and the technology organization, ensuring cyber risks are effectively identified, assessed, governed, and managed in alignment with the business units risk appetite, strategic objectives, and regulatory obligations. Why this role is important to us The Managing Director is a trusted executive partner who translates cybersecurity risk into business terms, influences enterprise decision-making, and drives a culture of accountability and cyber resilience. This individual leads a team of cyber risk advisors while serving as a key liaison between Global Cybersecurity, the business, technology organizations, and control functions. The successful candidate combines executive leadership, deep cybersecurity expertise, regulatory acumen, and strong business judgment to strengthen the firm's security posture while enabling strategic growth and innovation. What you will be responsible for Business Unit Cyber Risk Leadership Serve as the senior cybersecurity advisor to business executives, legal entity leadership, and global technology services. Provide strategic guidance regarding cyber threats, vulnerabilities, resiliency risks, and cyber control deficiencies. Influence enterprise-wide cyber risk reduction initiatives and investment decisions at the business unit level aligning cyber policy and technical standards. Drive the integration of cybersecurity considerations into business strategy, transformation programs, and critical business services. Lead executive discussions regarding cyber risk posture, emerging risks, and risk mitigation priorities. Cyber Risk Advisory & Oversight Establish and oversee cyber risk governance frameworks across the assigned business portfolios within the assigned business unit. Ensure cyber risks are actively managed within approved risk appetite thresholds. Review and challenge risk acceptance decisions involving material cyber exposures. Provide oversight of cyber control effectiveness, remediation activities, and residual risk management. Lead escalation of significant cyber risks to execute risk committees and senior governance forums. Trusted Advisor to Senior Leadership Build strong partnerships with Business Executives, Technology Leaders, and control function partners. Translate complex technical risks into clear business impacts and actionable recommendations. Enable informed decision-making through transparent risk reporting and executive-level communication. Provide consultative leadership on major technology initiatives, cloud adoption, AI programs, digital transformation, acquisitions, and strategic business initiatives. Serve as a strategic change agent driving enterprise adoption of cybersecurity controls and risk management practices. Vulnerability and Exposure Management Partner with vulnerability management teams to prioritize remediation activities based on risk. Analyze vulnerability trends, systemic control weaknesses, and emerging threat exposures. Provide advisory support on patch management, configuration management, and security hardening efforts. Assist business and technology teams in developing sustainable remediation strategies. Cyber Resilience and Risk Reduction Drive enterprise efforts to improve cyber resilience, operational resilience, and recovery preparedness. Oversee execution of strategic cyber remediation programs. Ensure alignment of cyber investments toward the highest-risk business services and assets. Guide business and technology leaders through major cyber incidents, crisis management activities, and lessons-learned programs. Champion threat-informed defense strategies to reduce business unit