Chief Information Security Officer – CISO

Houlihan Lokey

. Lead information security for a global investment bank .

Posted 11/4/2026full-timeUnited StatesLead💰 $325,000 - $350,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading information security strategies and operations within a global investment banking environment, with a strong focus on risk management, compliance, and incident response. Proven ability to communicate complex security concepts to senior management and influence decision-making across all levels.

Highest-signal resume keywords

NIST Cybersecurity FrameworkIncident Response LeadershipIdentity And Access ManagementCISSP CertificationCloud Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security StrategyRisk AssessmentSecurity OperationsData ProtectionApplication SecurityVulnerability ManagementSecurity Policy DevelopmentSecurity Due DiligenceMulti-Vendor Security Stack ConsolidationAI-Enabled Development Governance

Soft Skills

Clear CommunicationInfluencing Without AuthorityJudgment And PragmatismComposure Under PressureDecisiveness

Tools & Technologies

SIEMManaged Detection And ResponseCloud Security ToolsData Loss Prevention ToolsPhishing Simulation Tools

Certifications & Qualifications

CISSPCISMCloud Security Certification

Industry Keywords

Investment BankingRegulated Financial ServicesGovernance, Risk, And ComplianceZero-Trust AccessRegulatory Compliance

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead information security for a global investment bank
Own the firm’s information security strategy, operating model, budget, and multi-year roadmap
Assess risk against the NIST Cybersecurity Framework and manage a prioritized maturity plan with measurable milestones
Partner with Legal and Compliance to author, communicate, and enforce security policies and standards firm-wide
Deliver risk-based reporting to senior management, the audit committee, and the Board
Lead the firm’s cybersecurity governance forum
Direct security operations with managed detection and response and SOC providers
Oversee SIEM modernization, monitoring across endpoint, identity, cloud, and SaaS, AI-enabled triage and response, and 24/7 incident response
Own identity and access management, including multi-factor and passwordless authentication, privileged access, and least-privilege access models
Mature vulnerability and exposure management across internal, external, and cloud environments
Own data protection and governance, including classification, encryption, data loss prevention, and support for legal and discovery requests
Establish application security standards for professional and business-led development, including guardrails for AI-enabled development and agentic tooling
Lead the human risk program, including phishing simulations, red team exercises, and heightened protection for publicly visible executives
Rationalize the security tool portfolio and own vendor and third-party security risk
Conduct security due diligence for acquisitions
Ensure compliance with regulatory, privacy, and client contractual requirements
Lead responses to audits, regulator inquiries, and client due diligence
Build, lead, and develop the information security and governance, risk, and compliance teams

Requirements

What you’ll need

15+ years of progressive information security experience
At least 5 years leading an enterprise security function in a global, regulated environment
Ownership of a full security program built or matured against a recognized framework such as the NIST Cybersecurity Framework or ISO 27001
Experience reporting to boards, audit committees, and regulators, translating technical risk into business terms and metrics
Deep working knowledge across security operations, identity and privileged access, cloud security, zero-trust access, data protection, and application security
Proven incident response leadership, including coordination with external counsel, response partners, and executives
Experience writing and enforcing policy in a professional services or partnership culture
Bachelor’s degree in Information Technology, Computer Science, or a related field
CISSP, CISM, or equivalent certification, along with a current cloud security certification
Experience in investment banking or another regulated financial services environment
Experience leading security due diligence and integration for acquisitions
Experience consolidating a multi-vendor security stack and securing a hybrid estate through a cloud migration
Experience governing AI-assisted development and tools built by business users
Ability to communicate with clarity and credibility at every level and influence without relying on authority
Ability to balance judgment and pragmatism, enabling new technology safely
Ability to stay composed and decisive under pressure and take full ownership of outcomes

Benefits

Comp & perks

Competitive benefits package
Discretionary incentive compensation may be included as part of total compensation
Exciting career opportunity
Competitive total compensation package