Overview In this role you will help translate business and technology risk into practical information security guidance within CFO and Global Risk Management contexts. You will act as a liaison among business, technology, risk, and governance teams to strengthen security controls and enable informed decisions. You will support governance, risk assessment, and remediation workflows across finance-related functions, including regulatory and third-party risk. This is an opportunity to shape security practices in a large, inclusive organization that prioritizes Responsible Growth and collaboration. You will work with cross functional partners to monitor threats and drive secure technology modernization.
Compensation / Benefits- benefits eligible
- annual discretionary plan
- paid time off
- discretionary incentive eligible
- flexible benefits
- career development support
Responsibilities- Develop understanding of business, technology, control-function, and regulatory priorities to inform security risk discussions
- Coordinate with CFO, GRM, CIO/CTO and other stakeholders to provide security guidance on policies, controls, and exceptions
- Support finance, treasury, enterprise risk, regulatory affairs, and financial crime processes with information security input
- Serve as primary security liaison between business, technology, and Global Information Security teams for assigned portfolios
- Assist with security reviews, risk exceptions, control assessments, remediation activities, and governance processes
- Prepare and communicate security risk summaries and management-level communications
- Monitor emerging threats and risk trends impacting supported functions
- Promote accountability and timely remediation of security concerns across partners
- Translate technical risks into business impacts and actionable recommendations
Key requirements- 2-5 years of technology experience
- 5+ years of information security experience
- Experience supporting information security risk management activities (risk assessments, control evaluations, issue management, remediation tracking, exception reviews)
- Knowledge of application, infrastructure, cloud, data protection, IAM, and third-party security concepts
- Familiarity with cloud, AI, data platforms, encryption, and cryptographic technologies risks
- Ability to evaluate findings and recommend practical, risk-based solutions
- Strong business acumen in finance, risk management, regulatory, or control-function environments
- Strong analytical, organizational, and problem-solving skills with multi-priority management
- Excellent written and verbal communication, with ability to present to non-technical audiences
- Experience collaborating across business, technology, risk and governance to drive outcomes
- Self-motivated, independent work style with proactive risk identification and remediation
- strong communication
- cross-functional collaboration
- analytical thinking
- Information Security
- Risk Management
- Controls Management
