Cyber Security-Lead (TPRM, Risk assessments, Policy exceptions)

FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential!

The Opportunity

"As the Lead for Cybersecurity - Risk Management, you will act as a partner between FICO internal security standards and our expanding global supply chain. In this high-impact role, you will lead the charge in identifying, evaluating, and mitigating risks across both our internal IT landscape and our third-party ecosystem. You will act as a trusted advisor to FICO senior leadership, ensuring that our technical growth remains aligned with our risk appetite in a data-driven analytics environment".- Cyber Security, Director

What You’ll Contribute

• Lead the end-to-end lifecycle for both Internal Risk assessments and Third-Party Risk (TPRM). You will conduct deep-dive security assessments of internal systems, cloud environments, and vendor platforms to ensure no gaps exist in our defensive posture.

• Design, enhance and operationalize advanced risk-tiering methodologies and assessment workflows. You will integrate frameworks like NIST CSF, ISO 27001, PCI DSS into a unified risk management program.

• Evaluate the technical design and operating effectiveness of security controls across internal business units and external partners.

• Serve as the functional Lead for Process Unity, optimizing the platform to automate workflows and provide a real-time "single source of truth" for the firm’s entire cyber risk profile.

• Ensure the program meets the highest standards of regulatory excellence, specifically regarding PCI DSS, ISO 27001, CSA STAR and SOC 2, while maintaining a state of constant audit-readiness.

• Help us enhance how we vet third-party AI. You’ll ensure that when our partners use AI, they aren't inadvertently exposing our data, introducing algorithmic bias, or creating "black box" risks that we can't monitor

What We’re Seeking

• 7–10 years of experience across Information Security, IT Audit, or Cybersecurity Risk Management. You have a proven track record of assessing complex enterprise environments.

• Deep knowledge of IT infrastructure, cloud security (AWS/Azure), and application security. You know how to read a SOC 2 Type II report or a pen-test result and find what’s not being said.

• Expert-level understanding and hands-on experience applying global privacy regulations (GDPR, CCPA, HIPAA, SOX, GLBA) and assessment standards (SIG, ISO 27001, PCI DSS, NIST AI RMF, NIST CSF, NIST RMF) to real-world business challenges.

• Exceptional ability to present complex risk ideas to both engineering teams and executive leadership, anticipating objections and driving consensus.

• Bachelor’s or Master’s degree in a technical field. Highly preferred certifications include CRISC, CISA, CISM, or CISSP, ISO 27001:2022 Lead Auditor/Lead Implementer, ISO 42001:2023 Lead Auditor/Lead Implementer, PCI QSA, etc.

Our Offer to You

• High performance culture promoting recognition, rewards and professional development.

• An inclusive culture strongly reflecting our core values:  Act Like an Owner, Delight Our Customers and Earn the Respect of Others.

• Competitive base salary coupled with attractive role-specific incentive plan.

• Comprehensive benefits program.

• An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.

#LI-DNI

Why Make a Move to FICO?

At FICO, you can develop your career with a leading organization in one of the fastest-growing fields in technology today – Big Data analytics.  You’ll play a part in our commitment to help businesses use data to improve every choice they make, using advances in artificial intelligence, machine learning, optimization, and much more.

FICO makes a real difference in the way businesses operate worldwide:

•    Credit Scoring — FICO® Scores are used by 90 of the top 100 US lenders.

•    Fraud Detection and Security — 4 billion payment cards globally are protected by FICO fraud systems.

•    Lending — 3/4 of US mortgages are approved using the FICO Score.

Global trends toward digital transformation have created tremendous demand for FICO’s solutions, placing us among the world’s top 100 software companies by revenue. We help many of the world’s largest banks, insurers, retailers, telecommunications providers and other firms reach a new level of success. Our success is dependent on really talented people – just like you – who thrive on the collaboration and innovation that’s nurtured by a diverse and inclusive environment. We’ll provide the support you need, while ensuring you have the freedom to develop your skills and grow your career.  Join FICO and help change the way business thinks!

Learn more about how you can fulfil your potential at www.fico.com/Careers

FICO promotes a culture of inclusion and seeks to attract a diverse set of candidates for each job opportunity. We are an equal employment opportunity employer and we’re proud to offer employment and advancement opportunities to all candidates without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Research has shown that women and candidates from underrepresented communities may not apply for an opportunity if they don’t meet all stated qualifications. While our qualifications are clearly related to role success, each candidate’s profile is unique and strengths in certain skill and/or experience areas can be equally effective. If you believe you have many, but not necessarily all, of the stated qualifications we encourage you to apply.

Information submitted with your application is subject to the FICO Privacy policy at https://www.fico.com/en/privacy-policy