Chief Information Security Office-Strategy, Programs & GRC AVP

{
  "content_hash": "24e23e095fd178b6e81294cd6b4c67b5956c3278ae7be99369126a71c823d841",
  "source_hash": "9f460fb53558faa4ff6561ac428374afc9ba102b1bddd34319c85aa80de21dcc",
  "last_changed_at": "2026-06-01T13:47:22.788Z",
  "active_status": "active"
}

{
  "dedupe": null,
  "language": "en",
  "location": {
    "raw": "New York, NY, US",
    "city": "New York",
    "region": "NY",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": 65000,
  "salary_min": 3,
  "inferred_at": "2026-06-20T08:32:44.895Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "New York, NY, US",
      "city": "New York",
      "region": "NY",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": "year",
  "workplace_type": null,
  "salary_currency": "USD"
}

{}

{
  "json_ld": {
    "url": "https://careers-bocusa.icims.com/jobs/3869/chief-information-security-office-strategy%2c-programs-%26-grc-avp/job",
    "@type": "JobPosting",
    "title": "Chief Information Security Office-Strategy, Programs & GRC AVP",
    "@context": "http://schema.org",
    "baseSalary": {
      "@type": "MonetaryAmount",
      "currency": "USD",
      "maxValue": 150000,
      "minValue": 65000
    },
    "datePosted": "2025-11-01T04:00:00.000Z",
    "description": "<h2>Introduction</h2>\n<p>Established in 1912, Bank of China is one of the largest banks in the world, with over $3 trillion in assets and a footprint that spans more than 60 countries and regions. Our long-term outlook, institutional weight and global breadth provide our clients with a stable and reliable financial partner, whether in Corporate or Personal Banking or our Trade Services, Commodities, Financial Institutions and Global Markets lines of business.</p>\n<h2>Overview</h2>\n<p>This incumbent will provide Strategy, Programs, Governance, Risk and Compliance functions as required to fulfill BOCNY information security program requirements. This incumbent will provide Strategy Coordination, CISO Projects Management, Training & Culture, Metrics & Reporting, Governance, Risk Assessments and Compliance functions as detailed below.</p>\n<h2>Responsibilities</h2>\n<p>Governance</p>\n<ul>\n <li>Establish and maintain Information Security policies and procedures</li>\n <li>Ensure CISO roles and responsibilities are clearly delineated and documented to ensure efficiency, create synergies and ensure TISR is being properly managed across first and second lines</li>\n <li>Periodically refresh and update TISR controls guidance in relevant policies and supporting procedures with detailed implementation guidance</li>\n <li>Develop, monitor, and track CISO policy adherence measures and metrics</li>\n</ul>\n<p>Stragtegy & Programs</p>\n<ul>\n <li>Coordinate Information Security strategy in alignment with the Bank's strategy</li>\n <li>Maintain strategic initiatives tracking and associated KRIs to track progress and execution of the objectives</li>\n <li>Conduct quarterly strategy reviews with the CISO team to ensure alignment and momentum continue. Adjust strategy as necessary</li>\n <li>Provide end-to-end project management function for all CISO led projects</li>\n <li>Manage all CISO programs, including but not limited to: Information Security Program & Training & Culture Program</li>\n</ul>\n<p>Risk & Compliance</p>\n<ul>\n <li>Establish and enhance a TISR framework that consists of the appropriate components to effectively manage TISR </li>\n <li>Conduct risk assessments of TISR for Projects, Third-Party, New Activities and Applications</li>\n <li>Develop and execute an TISR annual work plan of risk identification, assessment, and control evaluation and testing activities</li>\n <li>Review and contribute to the development and maintenance of the taxonomy for Risk, Process and Controls for TISR domains.</li>\n <li>Catalog and oversee remediation of TISR issues include those arising from Audit and Regulatory exams, ITRM deep dives, root cause analyses and control testing</li>\n <li>Prepare and submit Audit Requests for evidence</li>\n <li>Anticipate audit requests and prepare comprehensive approach to for CISO policy and standards and associated implementation</li>\n <li>Prepare response evidence for IT/IS related regulatory exams</li>\n <li>Recommend changes to policy, process or procedures to align with OCC and other federal guidelines and regulations</li>\n <li>Evaluate and provide evidence of compliance for BOCNY Branch</li>\n <li>Liaison with LCD/RAO/IAD to ensure collaboration and partnership so that CISO can meet regulatory IT/IS requirements</li>\n</ul>\n<p>Metrics & Reporting</p>\n<ul>\n <li>Manage all metrics and reporting for CISO</li>\n</ul>\n<h2>Qualifications</h2>\n<ul>\n <li>Bachelor’s degree in Business, Computer Science, Management Information Systems, Engineering, Mathematics, or related field is required</li>\n <li>Minimum 5 years of work experience in Financial services Risk Management, Audit, IT/IS Operations, or other relevant functions</li>\n <li>Minimum 3 years of experience in developing and executing IT/IS Risk programs, projects, and policies</li>\n <li>Minimum 1 year of experience working with US Banking Regulations, financial industry standards, and industry standard IT/IS Risk Frameworks</li>\n <li><p>Strong program, frameworks, project management development, implementation, and maintenance skills</p></li>\n <li><p>Sound and practical IT/IS risk management and program knowledge</p></li>\n <li><p>Familiarity with IT/IS Risk Management regulations, standards, and frameworks including NIST, ISO27002, FFIEC Guidelines, etc.</p></li>\n <li><p>CISSP/CRISC/ or IT related certifications preferred  </p></li>\n</ul>\n<h2>Pay Range<p><em>Actual salary is commensurate with candidate’s relevant years of experience, skillset, education and other qualifications.</em></p></h2>USD $65,000.00 - USD $150,000.00 /Yr.",
    "directApply": true,
    "jobLocation": [
      {
        "@type": "Place",
        "address": {
          "@type": "PostalAddress",
          "postalCode": "10018",
          "addressRegion": "NY",
          "streetAddress": "1045 Avenue of Americas",
          "addressCountry": "US",
          "addressLocality": "New York",
          "postOfficeBoxNumber": "UNAVAILABLE"
        }
      }
    ],
    "validThrough": "2027-11-01T04:00:00.000Z",
    "employmentType": "FULL_TIME",
    "salaryCurrency": "USD",
    "hiringOrganization": {
      "name": "Bank of China  Limited, New York  Branch",
      "@type": "Organization",
      "sameAs": "http://bocusa.com"
    },
    "occupationalCategory": "Risk"
  },
  "detail_meta": {
    "url": "https://careers-bocusa.icims.com/jobs/3869/chief-information-security-office-strategy%2c-programs-%26-grc-avp/job?in_iframe=1",
    "http_status": 200,
    "content_type": "text/html;charset=UTF-8",
    "response_bytes": 36230,
    "compact_response_bytes": 5841,
    "original_response_bytes": 36230
  },
  "sitemap_job": {
    "id": "3869",
    "url": "https://careers-bocusa.icims.com/jobs/3869/chief-information-security-office-strategy%2c-programs-%26-grc-avp/job",
    "slug": "chief-information-security-office-strategy%2c-programs-%26-grc-avp",
    "lastmod": "2026-05-06T16:11:36-04:00"
  },
  "detail_errors": []
}