Hiring: Chief Information Security Office-Strategy, Programs & GRC AVP Company: Bank of China USA Location: New York, NY Job Posted Time: 2026-09-16 12:41:17 Target Skills & Keywords : Project Management, Risk Management About the job Experience: •5 years of work experience in Risk Management, Audit, IT/IS Operations, or other relevant functions •3 years of experience in developing and executing IT/IS Risk programs, projects, and policies •1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks •Minimum 5 years of work experience in Risk Management, Audit, IT/IS Operations, or other relevant functions •Minimum 3 years of experience in developing and executing IT/IS Risk programs, projects, and policies Required Skills: •Coordinate Information Security strategy in alignment with the BOCNY branch strategy. •Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives. •Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary. •Provide end-to-end project management function for all CISO led projects. •Manage all CISO programs, including but not limited to: Information Security Program, Data Privacy Program, and Training & Culture Program including Security Training, Phishing Campaigns, and Tabletop Exercises. •Establish and maintain Information Security policies and procedures. •Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines. •Periodically refresh and update TISR controls guidance in relevant policies and supporting procedures with detailed implementation guidance. Qualifications: •Bachelor’s Degree in Business, Risk, Data, Computer Science, Management Information Systems, Engineering, Mathematics, or related field •Strong program, frameworks, project management development, implementation, and maintenance skills •Strong writing skills, especially in the context of governing documents, such as policies and standards •Strong verbal and interpersonal skills when working with a diverse group of stakeholders that can include senior management, business staff, and technical staff Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!