FactSet Research Systems Inc. is a global provider of integrated financial information, analytical applications and industry-leading services for investment and corporate communities. As a publicly traded company (NYSE:FDS | NASDAQ:FDS) recently added to the S&P 500 index, FactSet delivers superior content, analytics, and flexible technology to help more than 207K users see and seize opportunity sooner. For over 40 years, the company has served financial professionals, which include portfolio managers, investment research professionals, investment bankers, risk and performance analysts, wealth advisors and corporate clients. FactSet gives our clients the edge to outperform with informed insights, workflow solutions across the portfolio lifecycle, and industry-leading support from dedicated specialists.  The company has been included in FORTUNE's 100 Best Companies to Work For, Best Workplace in the United Kingdom and France and most recently Best Places to Work 2023 by Glassdoor.

Job Description:

The Chief Information Security Officer (CISO) is crucial in safeguarding FactSet's information, digital assets, technology and data. The CISO is responsible for developing, implementing, and leading a robust cybersecurity program, which includes policies, standards, and procedures to protect against unauthorized access, modification, or destruction.

The CISO works closely with senior management, the CTO, and various business units to create a holistic information security strategy and vision aligned with FactSet's business objectives and regulatory requirements. The role involves overseeing risk assessments, incident response, data protection, and staff training programs in information security awareness.

Responsibilities:

Design and oversee the implementation of an enterprise-wide information security strategy that addresses modern challenges such as artificial intelligence, cloud security, data privacy, and international cybersecurity regulations, while appropriately balancing risk, cost and operational efficiency.
Direct the development and enforcement of information protection policies, including network and software security architectures, data handling procedures, and user access controls.
Spearhead the Information Security Management System (ISMS) and ensure alignment with ISO/IEC 27001, GDPR, and other relevant standards.
Conduct and oversee regular security assessments, penetration tests, and tabletop exercises to evaluate the effectiveness of security measures.
Foster a culture of vigilance and security awareness across the organization.
Lead the organization's responses to IT security incidents from identification through to resolution and post-mortem analysis, including managing any necessary communications with stakeholders and external parties.
Collaborate with HR to develop a top-tier cybersecurity team and support s their continuous development.
Provide updates to the Board of Directors and executive management on the state of the information security program, emerging risks, and ongoing initiatives.
Continuously update FactSet's security practices and policies to accommodate new technologies and threats, especially in areas such as Generative AI, machine learning, etc.
Serve as the primary contact for external auditors and help coordinate compliance activities.
Collaborate with GenAI development teams to integrate security best practices into the design and deployment of AI models.
Stay abreast of emerging GenAI security threats and technologies, and incorporate relevant findings into the organization's security practices.

Required Skills:

Proven leadership in IT and Information Security roles within a global organization, with at least 10 years of experience in security and technology, including managing a comprehensive security program.
At least 7 years in a senior leadership role with a strategic mind-set and experience influencing organizational change.
Expertise in security frameworks and regulations such as ISO/IEC 27000 series, SOC 2, PCI-DSS, GDPR, and CCPA.
Experience with advanced persistent threats, cloud security strategies, data protection laws and implementation, and security in AI environments.
Strong understanding of network and system security technology and practices across all major-computing areas (cloud, endpoint, server, network, etc.) with a special emphasis on data governance and protection.
Exceptional communication skills – capacity to articulate complex security risks and controls to non-technical stakeholders.
Robust project management skills, capable of driving complex projects with cross-functional teams.
Relevant certifications such as CISSP, CISM, CISA, or other recognized security professional certifications.
Experience with business continuity management and disaster recovery/incident response.
Experience providing strategic updates and information to Board of Directors and executive management.
Strong understanding of cloud security and experience with cloud service providers (AWS, Azure, etc.).

Leadership and Behavioral Competencies:

Strategic thinker with strong problem-solving capabilities.
Effective influencer and negotiator, skilled in envisioning and communicating the big picture in an inspiring way.
Demonstrates adaptability and decisiveness in responding to changing and uncertain situations.
Credible leader who earns respect and trust from all levels of the organization through demonstrated clear strategic vision and delivery on commitments.

Education:

A degree in Computer Science, Information Systems, Information Security, or a related field is preferred.
Hold a certification as a Certified Information Security Systems Security Professional (CISSP), Certified Chief Information Security Officer (CCISO), or Certified Information Security Manager (CISM).

What to expect when joining the FactSet Community:

Flexible work accommodations. We value work/life balance and offer our employees a range of accommodations to help them achieve success both at work and in their personal lives.
A global community dedicated to volunteerism, wellness, and team-building, where collaboration is always encouraged, and individuality drives solutions.
Career progression planning with a focus on career development, complete with dedicated time each month for conference attendance, online learning, networking and mentorship.
Business Resource Groups that align with our DE&I strategy, to foster inclusivity, led by our employees with support from Executive Management.
The chance to be part of a firm with over 40 years of consecutive growth, awarded a 2023 Best Places to Work by Glassdoor and led by a top-rated CEO Talent Champion
Learn more about our benefits here.

The budgeted salary range for this position in the states of California, Connecticut and New York is $250,000.00 - $310.000.00.

At FactSet, we celebrate diversity of thought, experience, and perspective. We are committed to disrupting bias and a transparent hiring process. All qualified applicants will be considered for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. FactSet participates in E-Verify.

FactSet is an Equal Opportunity Employer – M/F/Veteran/Disability/Sexual Orientation/Gender Identity

At FactSet, we celebrate diversity of thought, experience, and perspective. We are committed to disrupting bias and a transparent hiring process. All qualified applicants will be considered for employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status. FactSet participates in E-Verify

FactSet is an Equal Opportunity Employer – M/F/Veteran/Disability/Sexual Orientation/Gender Identity

FactSet jobs

Chief Information Security Officer

Chief Information Security Officer