Role Overview for Chief Information Security Officer | Financial Services | Miami, FL
JRG Partners is proud to represent a premier, technology-driven financial services firm in their search for a visionary and strategic Chief Information Security Officer (CISO). Based in the vibrant financial hub of Miami, FL, this executive leadership role is critical to the firm’s continued success and integrity. The CISO will be the principal architect and steward of the company’s information security vision, strategy, and program. This is a unique opportunity to shape the security posture of a dynamic organization operating at the intersection of finance and technology, ensuring the confidentiality, integrity, and availability of its data and systems in a complex and ever-evolving threat landscape.
The successful candidate will be a seasoned leader with deep expertise in cybersecurity, risk management, and regulatory compliance within the financial services industry. Reporting directly to the Chief Technology Officer (CTO) and with significant exposure to the Board of Directors and executive leadership, the CISO will serve as the enterprise’s most senior information security authority. You will be responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. This position requires a leader who can balance the need for robust security with the demands of a fast-paced, innovative business, acting as both a guardian and an enabler of business objectives. You will lead a talented team of security professionals, fostering a culture of security awareness and accountability across all levels of the organization.
Key Responsibilities of Chief Information Security Officer | Financial Services | Miami, FL
The CISO will have a broad range of responsibilities, encompassing strategic leadership, operational excellence, and governance. Key duties include:
Strategic Leadership & Vision
Develop, implement, and monitor a comprehensive, forward-looking enterprise information security and risk management strategy that aligns with business goals and mitigates current and future threats.
Governance, Risk & Compliance (GRC)
Establish and lead the information security governance program. Develop, publish, and maintain corporate security policies, standards, and procedures. Ensure compliance with all applicable laws and financial regulations (e.g., GLBA, SOX, NYDFS, FFIEC) and industry standards. Oversee regular risk assessments, vulnerability analyses, and penetration tests to identify and remediate security gaps. Lead the adoption and maturation of frameworks like the NIST Cybersecurity Framework.
Security Operations & Incident Response
Oversee the Security Operations Center (SOC) to ensure 24/7 monitoring, detection, and response to security events. Lead the development and execution of a sophisticated incident response plan, including tabletop exercises, forensic investigations, and post-incident analysis and reporting.
Threat Intelligence & Management
Direct the firm’s threat intelligence program to proactively identify and analyze emerging threats, threat actors, and attack vectors relevant to the financial services industry.
Security Architecture & Engineering
Collaborate with IT, engineering, and product teams to embed security controls into the system development lifecycle (SDLC) and promote DevSecOps principles. Provide security architecture guidance for all new technology deployments, including cloud services (AWS, Azure, GCP), applications, and infrastructure.
Data Protection & Privacy
Design and implement comprehensive data protection strategies, including data classification, data loss prevention (DLP), encryption, and tokenization to protect sensitive client and corporate data at rest and in transit.
Identity & Access Management (IAM)
Own the enterprise IAM strategy, ensuring robust controls for user authentication, authorization, and privileged access management (PAM) across all systems and platforms.
Team Leadership & Development
Recruit, lead, mentor, and develop a high-performing team of cybersecurity professionals. Foster a collaborative, innovative, and results-oriented security culture.
Budget & Vendor Management
Develop and manage the annual information security budget, ensuring optimal allocation of resources. Oversee relationships with third-party security service providers, consultants, and technology vendors, conducting due diligence and managing performance.
Executive & Board Reporting
Regularly report on the status and effectiveness of the information security program to the executive leadership team, risk committees, and the Board of Directors, translating complex technical risks into clear business terms.
Security Awareness & Training
Champion and manage a comprehensive security awareness and training program for all employees, contractors, and partners to strengthen the human firewall.
Requirements for the Chief Information Security Officer | Financial Services | Miami, FL
The ideal candidate will possess a blend of deep technical expertise, strong business acumen, and exceptional leadership skills. We are seeking a professional who has a proven track record of building and leading successful security programs in complex, regulated environments.
Experience
A minimum of 15 years of progressive experience in information security and IT risk management, with at least 7 years in a senior leadership capacity (e.g., CISO, Deputy CISO, Head of Information Security).
Industry Expertise
Demonstrable and significant experience within the financial services, banking, asset management, or fintech sectors is mandatory. A deep understanding of the unique security challenges and regulatory landscape of this industry is essential.
Educational Background
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is required. A Master’s degree (MBA or MS in Information Security) is highly preferred.
Professional Certifications
One or more top-tier security certifications are strongly desired, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Auditor (CISA).
Technical Proficiency
Expert-level knowledge of security domains including GRC, security operations, cloud security (AWS, Azure), network and endpoint security, application security (SAST/DAST), cryptography, and identity management.
Regulatory Knowledge
In-depth knowledge of financial industry regulations and standards, including FFIEC, GLBA, SOX, PCI DSS, and data privacy laws (e.g., GDPR, CCPA).
Leadership & Communication
Proven ability to lead and inspire a diverse team. Exceptional communication, presentation, and influencing skills with the ability to engage effectively with all levels of the organization, from technical engineers to the board of directors.
Strategic Mindset
Ability to think strategically, anticipate future threats and opportunities, and develop long-term plans that align security with the overall business strategy.
Problem-Solving
Strong analytical and problem-solving skills, with a demonstrated ability to make critical decisions under pressure during security incidents.
Benefits & Perks Offered
Our client is committed to attracting and retaining top-tier executive talent and offers a highly competitive and comprehensive compensation and benefits package, including:
- Executive-level base salary and performance-based annual bonus.
- Long-term incentive plan (equity or similar).
- Comprehensive medical, dental, and vision insurance plans for you and your dependents.
- Generous 401(k) retirement plan with a strong company match.
- Substantial paid time off (PTO), company holidays, and sick leave.
- A dedicated budget for professional development, including industry conferences, executive training, and certifications.
- Relocation assistance package for qualified candidates moving to the Miami area.
- Executive wellness programs and perks.
- A dynamic and collaborative work culture in a state-of-the-art office located in a prime Miami business district.
How to Apply
JRG Partners is the exclusive search firm leading this critical recruitment effort. We invite qualified and interested candidates to apply for this exceptional opportunity to lead the cybersecurity function at a prestigious financial services firm.
To be considered for this pivotal role, please submit your resume and a cover letter detailing your experience in the financial services sector and your vision for a modern security program. Learn more about our expertise in this area by visiting our CISO & Security Leadership Search Practice page. All applications will be treated with the strictest confidentiality.
