Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Chief Information Security Officer (CISO) role.

Rezi rewrites your resume against Houlihan Lokey's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Chief Information Security Officer (CISO) posting at Houlihan Lokey — free, in seconds.

About the Role

As Chief Information Security Officer, you will lead information security for a global investment bank, protecting client information across the firm’s global platform. You will be the senior voice on security with executive management, the audit committee, and the Board, setting standards and managing incidents with credibility and pragmatism. You will lead security and governance teams, own the security investment portfolio, and partner across departments to ensure the firm is well defended and agile.

Responsibilities

Own the firm’s information security strategy, operating model, budget, and multi-year roadmap, grounded in a risk-based assessment against the NIST Cybersecurity Framework and a prioritized maturity plan with measurable milestones.
Partner with Legal and Compliance to author security policies and standards, and own their communication and enforcement firm-wide.
Deliver risk-based reporting to senior management, the audit committee, and the Board, and lead the firm’s cybersecurity governance forum.
Direct security operations with the firm’s managed detection and response and SOC providers, including SIEM modernization, monitoring across endpoint, identity, cloud, and SaaS, AI-enabled triage and response, and 24/7 incident response.
Own identity and access management, including multi-factor and passwordless authentication, privileged access, and least-privilege access models.
Mature vulnerability and exposure management across internal, external, and cloud environments, with clear remediation ownership and service levels.
Own data protection and governance, including classification, encryption, data loss prevention, and support for legal and discovery requests.
Establish application security standards for both professional and business-led development, including guardrails for AI-enabled development and agentic tooling.
Lead the firm’s human risk program, including phishing simulations, red team exercises, and heightened protection for publicly visible executives.
Rationalize the security tool portfolio and own vendor and third-party security risk, including security due diligence for acquisitions.
Ensure compliance with regulatory, privacy, and client contractual requirements, and lead responses to audits, regulator inquiries, and client due diligence.
Build, lead, and develop the information security and governance, risk, and compliance teams.

Requirements

15+ years of progressive information security experience, including at least 5 years leading an enterprise security function in a global, regulated environment.
Demonstrated ownership of a full security program, built or matured against a recognized framework such as the NIST Cybersecurity Framework or ISO 27001.
Experience reporting to boards, audit committees, and regulators, translating technical risk into business terms and metrics.
Deep working knowledge across security operations, identity and privileged access, cloud security, zero-trust access, data protection, and application security.
Proven incident response leadership, including coordination with external counsel, response partners, and executives.
Experience writing and enforcing policy in a professional services or partnership culture.
Bachelor’s degree in Information Technology, Computer Science, or a related field.
Master’s degree or MBA preferred.
CISSP, CISM, or equivalent certification, along with a current cloud security certification.
Experience in investment banking or another regulated financial services environment.
Experience leading security due diligence and integration for acquisitions.
Experience consolidating a multi-vendor security stack and securing a hybrid estate through a cloud migration.
Experience governing AI-assisted development and tools built by business users.
Communicate with clarity and credibility at every level, and influence without relying on authority.
Balance judgment and pragmatism, enabling new technology safely rather than defaulting to restriction.
Hold a firm line where it matters while preserving strong working relationships.
Stay composed and decisive under pressure, and take full ownership of outcomes.

Skills

Information security strategy
Operating model
Budget management
Roadmap development
NIST Cybersecurity Framework
Security policies and standards
Risk-based reporting
Cybersecurity governance
Security operations
Managed detection and response (MDR)
Security Operations Center (SOC)
SIEM modernization
Endpoint security
Identity and Access Management (IAM)
Cloud security
SaaS security
AI-enabled triage and response
Incident response
Multi-factor authentication
Passwordless authentication
Privileged access management
Least-privilege access
Vulnerability management
Exposure management
Data protection
Data governance
Data classification
Data encryption
Data loss prevention (DLP)
Application security
AI-enabled development
Agentic tooling
Human risk management
Phishing simulations
Red team exercises
Vendor risk management
Third-party security risk
Security due diligence
Regulatory compliance
Privacy compliance
Client contractual compliance
Audit response
Regulator inquiry response
Team leadership
Team development
Governance, Risk, and Compliance (GRC)
ISO 27001
Zero-trust access
Investment banking
Financial services
Acquisition integration
Cloud migration
Communication
Influence
Judgment
Pragmatism
Decision-making
Ownership

Location

United States
Europe
Middle East
Asia-Pacific region

Work Type

Full-time

Experience Level

15+ years of progressive information security experience
5+ years leading an enterprise security function

Education Level

Bachelor’s degree in Information Technology, Computer Science, or a related field
Master’s degree or MBA preferred

Salary/Compensations

$325,000-$350,000

Benefits

Competitive total compensation package
Discretionary incentive compensation
Competitive benefits package

About the Company

Houlihan Lokey, Inc. (NYSE:HLI) is a leading global investment bank recognized for delivering independent strategic and financial advice to corporations, financial sponsors, and governments.
With uniquely deep industry expertise, broad international reach, and a partnership approach rooted in trust, the firm provides innovative, integrated solutions across mergers and acquisitions, capital solutions, financial restructuring, and financial and valuation advisory.
Our unmatched transaction volumes provide differentiated, data-driven perspectives that help our clients achieve their most critical goals.
Houlihan Lokey (NYSE:HLI) is a global investment bank with expertise in mergers and acquisitions, capital markets, financial restructuring, and valuation.
The firm serves corporations, institutions, and governments worldwide with offices in the United States, Europe, the Middle East, and the Asia-Pacific region.
Independent advice and intellectual rigor are hallmarks of the firm’s commitment to client success across its advisory services.
Houlihan Lokey is the No. 1 investment bank for all global mergers and acquisitions (M&A) transactions, the No. 1 M&A advisor for the past seven consecutive years in the U.S., the No. 1 global restructuring advisor for the past eight consecutive years, and the No. 1 global M&A fairness opinion advisor for the past 20 years, all based on number of transactions and according to data provided by Refinitiv.

Equal Opportunity

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, gender identity, sexual orientation, protected veteran status, or any other characteristic protected by law.