The US Regional CISO shall understand and manage DLL's cyber and information security posture and risk exposure while educating the business on US regulatory requirements related to information security, alignment with EU requirements and DLL policies, and setting appropriate standards and metrics for the US operation.

This role requires a deep understanding of cybersecurity principles and frameworks, regulatory compliance (especially US), risk management, and effective leadership to safeguard the organization against cyber threats.

Key responsibilities will be to translate cyber security US regulatory requirements, with consultation with Legal and other stakeholders, into the business, drive proactive compliance with industry regulations related to information security, ensure ongoing risk and compliance assessments, oversee evaluation of appropriate security controls, develop, implement, and monitor local policies and standards, raise security awareness, develop, maintain, and conduct training programs, and facilitate incident response program when needed. The role may also be involved in project and product development consultation, other business operations with cyber and information security impact, and incident response program management.

This is a leadership and senior advisory role to the US Leadership Team, DLL global teams, and relevant Global Business Unit members. This requires the ability to clearly communicate, create clarity and structure in the strategic, operational, and external aspects of DLL.

The CISO will be based in the United States (with strong preference for Wayne, Pennsylvania) and will report directly to the Chief Risk Officer.

Day to Day

Protect US Region organization and assets against cyber threat and security breaches.
Establish and maintain US Regional information security program, policies, standards, and guidelines, in alignment with the existing global program and addressing specific US region requirements where needed.
Set goals and objectives for the US organization and its Cyber security posture.
Drive compliance with local requirements.
Keep abreast of the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities, with a focus on managing US regulatory change towards compliance.
Set standard on quality assurance monitoring to achieve and maintain policy and regulatory compliance.
Drive security awareness and training for the US Region organization, including senior management and relevant boards.
Oversee Regional governance practices related to information security.
Drive alignment with Global Policies and across functions.
Facilitate global connection and alignment (policy/regulatory requirements/etc.).
Oversee the translation and implementation of global policy requirements in the US Region.
Work closely with other business groups and stakeholders, including Legal, Compliance, Audit, and Risk, ensuring the protection of information and assets including data, systems, databases, networks, and other resources.
Partner with and enable first line of responsibility, while ensuring objectivity and independence.
Provide effective functional guidance to the US business to assess and prioritize security risks.
Serve as a subject matter expert, provide architecture guidance across cybersecurity functional areas including Network, Endpoints, Cloud, Identity & Access Management, Data Encryption & Protection, Logging, Application & APIs, Customer and Vendor B2B, Product Cybersecurity, Operational Threat/Manufacturing, IoT, and AI/ML.
Partner closely with IT delivery leadership and system owners on risk mitigation steps.
Oversee and/or advise on timely mitigation of vulnerabilities and security gaps.
Oversee/help direct response to information security incidents, data breaches, and in general with the business continuity program.
Provide transparent view of US Region cyber security posture and exposures.
Develop security metric and information requirements for reporting to senior management and boards on information security and cybersecurity risks and mitigation progress.
Facilitate IT/Cyber Security risk assessments, via ongoing risk assessment program targeting information security, cybersecurity, and privacy matters.
Conduct control assessments and ensure security controls align with risk tolerance.

All members enjoy

Two working days per year volunteering for a local charity.
Health and Wellness program including healthy food, free health checks, fun health & vitality activities.
Flexible hours with possibility to work from home.

Bachelors degree in relevant domain, with specialization in Information Security or equivalent field; risk management and/or audit experience is a plus.

At least 10 years of work experience in banking or financial services industry.
Minimum of 7 years of experience in Information / Cyber Security field.
Data and quality driven and results oriented.
Excellent (verbal and written) communication skills in English.
Highly adaptable, proactive, and a self–starter.
Strongly collaborative, displaying excellent ability to build internal and external relationships across a variety of levels, countries, and cultures.
A natural developer and coach, creating and delivering high quality training across a number of functions and countries.

DLL's wellbeing ambition is to educate, equip and empower members to build connections, manage their mental, emotional, physical and financial wellness and maintain balance between work and the other priorities that make up their lives.

Our four wellbeing categories are as follows:

Connection – Build meaningful connections with other DLL members.
Health – Manage mental, emotional and physical health.
Finance – Provide learning opportunities to help members achieve personal financial health.
Lifestyle – Maintain balance between work and life priorities.

There are things that matter to our members and the wellbeing of our members matters to DLL!

Good to Know

Desired Primary Work Location: Wayne, PA

Other Acceptable Work Locations: Des Moines, IA

Applicable Pay Range

$153,721–$200,000

DLL is considering candidates in numerous locations. The pay estimate displayed represents the typical pay range for candidates hired for this position in the desired primary work location. Pay may be adjusted outside the projected range based on geographical differentiation as well as for any other lawful reason. Additional factors that may be used to determine your actual pay include your specific skills, years of relevant experience you possess, and other work–related qualifications. Many candidates may start in the bottom half of the applicable pay range, especially those with less experience or qualification.

This position is subject to the terms of DLL's compensation plans and policies. Further, the position includes all other benefits provided to DLL employees, including healthcare benefits, 401k matching, vacation, sick leave, parental leave, possible discretionary bonuses, and all other benefits that are all governed by and subject to ERISA plan documents and eligibility.

Deadline for application: September 18, 2024 (Due to high volume of applications this requisition may close prior to posted close date).
The selection process may involve an assessment.
Applications via email will not be reviewed. Please apply online via our career website:

DLL appreciates the time you spend applying to our openings. We advise only those who qualify for an interview will be contacted. Hiring subject to successful completion of a background check.

DLL is an equal opportunity employer. We are committed to inclusive, barrier–free recruitment and selection processes and work environments. If contacted for an employment opportunity, please advise Human Resources if you require accommodation in accordance with our values and all applicable legislation.

#J-18808-Ljbffr

DLL - Financial Solutions Partner - Part of Rabobank

New Jobs

Finance & Control Senior Income Tax Analyst

Risk US Chief Information Security Officer