Information Security Officer (Cybersecurity)

Location: Dallas, Texas, United States

Company

hirify.global is a global investment banking, securities, and investment management firm founded in 1869, headquartered in New York, with offices around the world.

What you will do

• Define, implement, and oversee the information security and cybersecurity risk posture for the Asset Management Private business.
• Lead and provide strategic direction to Governance, Risk & Compliance, Application Security & Advisory, and Product Security functions.
• Advise application development teams on information security, business resiliency, secure design, emerging web and mobile threats, and control integration.
• Assess application design-related security risks, recommend remediation, and communicate technology risks and mitigation or acceptance approaches.
• Drive adoption of embedded application security controls throughout the Software Development Life Cycle.
• Develop customized security testing strategies and collaborate with global technology risk teams on security and resiliency practices.

Requirements

• 3–5 years of progressive, multidomain information security experience, including areas such as vendor security, application security, vulnerability management, data loss prevention, data encryption, and infrastructure security.
• Expert knowledge of global financial regulations, including SEC, FINRA, GDPR, and CCPA, and experience applying FAIR or similar risk management frameworks.
• Proven ability to build, mentor, and lead high-performing global security teams.
• Experience collaborating with engineering, technology, second-line risk, and audit partners to deliver projects and resolve audit issues within committed timelines.
• Exceptional written and oral communication skills for explaining complex technical risks and solutions to technical and executive audiences.
• Expertise in risk assessments, identifying information security policy compliance gaps, and recommending mitigation strategies.
• Familiarity with NIST, OWASP, SANS Top 20, PCI DSS, and CIS Controls.
• Expertise in technology risk data analytics, metrics reporting, dashboarding, SDLC best practices, code reviews, vulnerability scan report analysis, and application security practices.

Nice to have

• BS or MS degree in Computer Science, Cyber Security, Information Security, or a related technical field.
• Certifications such as CISSP, CISM, CRISC, CISA, or AWS Certified Security – Specialty.
• Experience leveraging AI/ML to solve security problems and scale operations.
• Knowledge of secure coding languages such as Python, Java, or Go.

Culture & Benefits

• Training and development opportunities, firmwide networks, wellness programs, personal finance offerings, and mindfulness programs.
• Commitment to diversity, inclusion, and reasonable accommodations during the recruiting process.