ISO Business Growth

Join the Mizuho team in a role with our Information Security Office!

Summary: This position reports directly to the Head of the Information Security Office, contributes to, and supports the firm's overall Information Security.

The position interfaces with various levels of IT and business personnel, monitoring critical security functions, evaluating key IT processes from a perspective of information security, and advises on best practices and approaches.

The ISO is an advanced role supporting the entire cybersecurity program.

This individual provides executive support, strategic and tactical guidance, and complete execution for a world-class cybersecurity program, primarily supporting regional enterprise security initiatives.

As directed by the CISO, the ISO helps drive strategy while providing oversight and reporting on the execution of enterprise security systems, applications and operations.

As a business enabler, the ISO ensures business decisions are not obstructed by cybersecurity but instead are made using sound security principles and supporting corporate security policies and plans.

The ISO will work with an adaptable and secure business-supporting cybersecurity team, in addition to influencing and executing with technical teams, which includes but is not limited to patch management, security operations, security engineering and software development.

Essential Job Duties
 


* Work closely with security leadership overseeing security operations, incident response, security architecture and infrastructure security programs providing strategy & guidance on best practices and oversight


* Manage all security awareness trainings, newsletters, and phishing campaigns as required for all employees using solution provider and custom-developed tools, providing education and measuring outcomes indicating employee behavioral change


* Promote a strong security culture set forth by the ISO, ensuring uniformity across security leadership, business units and employees


* Stay abreast of information security and information technology issues, threats, vulnerabilities and regulatory changes affecting the organization, and perform independent research as needed.

Provide consultation and guidance to IT teams as and when needed to address issues.


* Ensure security governance is uniformly applied and remain informed on projects progress; create quality reports illustrating program status, areas for improvement and success


* Work with, monitor and provide guidance, evaluation and advocacy on information security related audits including scope of audits, issue finding, and disposition of issues to put the institution in its best light.


* Work closely with various business functions (e.g., banking, equities, operational risk, compliance, legal, HR and audit teams) to provide security best practice expertise.

Stay abreast of new laws, regulations and standards, and assess their impacts to the business


* Drive efforts to...