Information Security Risk Manager Jobs in Springfield, VA

The Information Security Officer (ISO) will serve as a key member of the Business Information Security Officer (BISO) organization, partnering closely with Global Banking & Markets (GBAM) stakeholders to develop a deep understanding of business objectives, technology strategy, and associated cybersecurity risks. Through strong partnerships and risk-based engagement, the ISO will provide strategic security guidance, challenge and oversight, helping ensure information security risks are effectively identified, assessed, and managed in alignment with enterprise policies, standards, and regulatory expectations. The successful candidate will become a trusted advisor to senior stakeholders, enabling informed risk decisions while supporting business innovation and growth.

• Serve as the primary information security advisor and point of contact for assigned GBAM, providing guidance on cybersecurity risks, policies, standards, and controls.
• Act as a subject matter expert in the development, implementation, and ongoing oversight of information security practices within the line of business.
• Provide independent risk-based challenge and advisory support for technology initiatives, strategic programs, and implementation changes across the GBAM environment.
• Influence and advocate for the prioritization of investments that strengthen the organization’s security posture and reduce risk.
• Advise business and technology leadership on cybersecurity risk issues and recommend actions that support the bank’s broader risk management, regulatory, and compliance objectives.
• Collaborate with Risk, Technology, and Control partners to enhance security processes, governance frameworks, and risk management capabilities.
• Partner with the Global BISO organization to ensure GIS policies, standards, requirements, and strategic initiatives are communicated, understood, and effectively implemented.
• Establish and maintain strong relationships across business, technology, risk, and control functions to facilitate effective security risk management.
• Conduct routine coordination with risk partners and technology teams to address vulnerabilities, control gaps, and remediation activities, focusing on elevated risk issues.
• Drive remediation efforts for cybersecurity issues and support stakeholders in achieving sustainable solutions aligned with GIS standards, baselines, and control requirements.
• Support ad hoc security consultations, risk assessments, governance activities, and executive reporting as required.

• Experience within information security, cybersecurity engineering, technology risk management, security operations, or security consulting functions.
• Strong understanding of security controls, risk management practices, and cybersecurity frameworks applicable to enterprise systems, applications, cloud platforms, and network environments.
• Demonstrated ability to communicate, influence, and negotiate effectively with senior business and technology leaders.
• Strong analytical and problem‑solving skills with the ability to assess risk and provide practical, business‑aligned recommendations.
• Understanding of vulnerability management concepts, associated tooling, and remediation governance processes.
• Ability to independently manage competing priorities and oversee a diverse portfolio of work.
• Strong communication and stakeholder management skills, including the ability to deliver challenging messages and drive issue resolution.
• Proven ability to build relationships, establish credibility, and operate effectively across complex organizational environments.

• Experience with Artificial Intelligence (AI) governance, AI risk management, and responsible AI practices, including familiarity with emerging regulatory requirements, AI security controls, model risk considerations, and governance frameworks supporting the secure adoption of AI technologies.
• Experience within large‑scale technology and financial services organizations, with strong knowledge of application security risks, controls, and secure development practices.
• Experience conducting formal security risk assessments and facilitating risk‑based decision‑making.
• Deep technical understanding of technology infrastructure, cloud platforms, application architectures, and operational security practices.
• Previous experience working within a highly regulated financial institution.
• Demonstrated ability to work collaboratively within a matrixed Global Information Security organization.
• Excellent verbal, written, and executive briefing skills, with experience producing management‑level reporting and presentations.

• Trusted advisor mindset with strong business acumen.
• Ability to balance risk management objectives with business enablement.
• Proven capability to influence without direct authority across multiple organizations.
• Strategic thinker with the ability to translate complex security risks into clear business outcomes and actionable recommendations.

• Controls Management
• Cyber Security
• Data Governance
• Information Systems Management
• Risk Management
• Architecture
• Customer and Client Focus
• Executive Presence
• Threat Analysis
• Vendor Management

Shift: 1st shift (United States of America)

Hours Per Week: 40

Pay Range: $99,200.00 – $145,000.00 annualized salary, offers to be determined based on experience, education, and skill set.

Incentive: Discretionary incentive eligible – employees are eligible for an annual discretionary award based on overall individual performance results and behaviors, the performance and contributions of their line of business and/or group, and the overall success of the company.

Benefits: This role is currently benefits eligible. We provide industry‑leading benefits, access to paid time off, resources, and support to employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.