The Director – Information Security Risk Officer will function as a 2nd line of defense role, providing credible challenge and oversight of information security activities. This role will be responsible for developing, implementing, and maintaining a program for assessing, identifying, and tracking information and cybersecurity risks and working with the applicable business lines on mitigation.