Chief Information Security Officer

BPM LLP

. Provide vision, leadership, and strategic direction for BPM's enterprise information security, cyber risk, privacy, and trust programs .

Posted 10/9/2026full-timeRemote • United StatesLead💰 $275,000 - $300,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in information security leadership, risk management, and compliance, with a strong focus on integrating security into business strategies and emerging technologies. Proven ability to communicate effectively with executive leadership and manage complex security programs across various industries.

Highest-signal resume keywords

Information Security LeadershipCyber Risk ManagementCloud SecurityCISSP CertificationIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk ManagementPrivacy ComplianceSecurity ArchitectureDisaster Recovery PlanningBusiness Continuity PlanningSecurity GovernanceCloud SecurityAI GovernanceVendor Risk Management

Soft Skills

Excellent Communication SkillsInterpersonal SkillsNegotiating SkillsAnalytical AbilitiesTeam Collaboration

Tools & Technologies

ISO 27001SOC 2SaaSERP SystemsEmerging Technologies

Certifications & Qualifications

CISSPCISMCRISCCCSP

Industry Keywords

Professional ServicesPublic AccountingFinancial ServicesLegalHealthcare

Tech Stack

Tools & technologies

CloudCyber SecurityERP

About the role

Key responsibilities & impact

Provide vision, leadership, and strategic direction for BPM's enterprise information security, cyber risk, privacy, and trust programs
Partner with the CIO and technology organization while maintaining independent responsibility for information security risk, governance, compliance, and assurance
Integrate security into business strategy, client service delivery, and emerging technologies, including artificial intelligence
Participate in senior management governance processes for security strategies
Lead strategic security planning and prioritize defense initiatives using risk-based assessment methodology
Develop and communicate security strategies and plans to executives, staff, partners, customers, and stakeholders
Assist with disaster recovery and business continuity plans, procedures, audits, and enhancements
Develop, implement, maintain, and enforce system security and user access policies and procedures
Establish security architecture, governance, and risk management standards for technology solutions
Ensure security, privacy, compliance, and resiliency requirements are incorporated into enterprise applications, cloud services, infrastructure, and emerging technologies
Provide security oversight and risk assessment for technology initiatives, vendors, and strategic investments
Define security requirements and approval processes for new technologies
Integrate security, privacy, and risk management into enterprise architecture, applications, infrastructure, and business processes
Establish and oversee physical security, access control, and facility protection standards
Develop and manage information security operating and capital budgets
Assess and advise on information security, privacy, and technology risks
Lead the development and performance of the information security team
Maintain strategic relationships with clients, regulators, vendors, and industry partners
Advise executive leadership on cybersecurity, privacy, AI, and emerging technology risks and opportunities
Lead cybersecurity incident response, crisis management, cyber recovery, disaster recovery, and business continuity activities
Lead executive communications and stakeholder engagement during significant security events
Conduct post-incident reviews and drive continuous improvement
Provide regular security and risk reporting to executive leadership, committees, and the Board of Directors
Translate technical risks into business impact, decision-making guidance, and measurable security outcomes
Oversee client trust, security assurance, security responses, attestations, and trust-center content
Establish governance frameworks for artificial intelligence, automation, and emerging technologies
Assess emerging technology risks and enable responsible innovation
Oversee BPM's third-party risk management program and vendor risk review processes

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Security, Business Administration, or related field
10+ years leading information security and cyber risk programs
Deep knowledge of cybersecurity, risk management, cloud security, privacy, identity, and regulatory compliance
Experience presenting to executive leadership and boards
Experience leading incident response and crisis management
Experience with ISO 27001, SOC 2, privacy regulations, and client security assessments
Experience securing cloud, SaaS, ERP, and other business-critical platforms
Experience with AI governance and emerging technology risk management
CISSP, CISM, CRISC, CCSP, or similar certifications preferred
Experience in professional services, public accounting, financial services, legal, healthcare, or other highly regulated industries preferred
Excellent written and oral communication skills
Excellent interpersonal skills
Strong negotiating skills
Ability to present ideas in business-friendly and user-friendly language
Exceptionally self-motivated and directed
Keen attention to detail
Superior analytical, evaluative, and problem-solving abilities
Exceptional service orientation
Ability to motivate in a team-oriented, collaborative environment
On-call availability and periodic overtime
Dexterity of hands and fingers to operate a computer keyboard, mouse, and other computing equipment

Benefits

Comp & perks

Total rewards package including flexible work arrangements, personalized benefit structures, and financial compensation options
Flexible work arrangements
Accommodations available on request for candidates with disabilities
Periodic overtime compensation implied by the total rewards package