Arootah

Compensation

Full Description

Join our experienced roster of consultants that support Hedge Funds and Family Offices. Arootah is a personal and professional development leader in the Investment and Financial Services industry. Our mission is to provide top business advisory services to our hedge fund client base. Our Business Advisory Services focuses on the multi-faceted needs of Hedge Funds and Family Offices. Arootah was founded by Rich Bello, the Co-Founder and COO of the industry-leading $10 billion hedge fund, Blue Ridge Capital. Rich brings more than 30 years of experience, including leadership positions at Morgan Stanley, Tiger Management, and Ernst & Young. Visit us at https://arootah.com/hedge-fund-advisory/ for more information. WHO WE NEED: Arootah is searching for experienced Chief Information Security Officers to consult to our highly prestigious client base. As a consultant, you will work with our Hedge Fund and Family Office clients to provide expert advice. Having previously served in the role of Chief Information Security Officer you have specific, hands-on experience building, maintaining, and operating the full Cybersecurity Program for a leading Hedge Fund or Family Office. What You'll Do • Provide advice and guidance to Arootah clients who seek help with their Cybersecurity needs. This will involve consulting to some of the leading Hedge Funds and Family Offices in the world and sharing your experience as a Chief Information Security Officer in helping clients to: • Develop realistic and effective monthly action plans. • Identify internal and contextual roadblocks.  • Break apart goals into actionable steps.  • Devise a plan of action for each goal. • Provide the client with resources associated with implementing their action plan. • Implement policies, procedures, and control measures.  • Review, analyze and report on client tools and resources to ensure industry best practices. • Evaluate each client’s advancement toward goal actualization through key performance indicators (KPIs) and scoring matrices.  • Maintain and share detailed and accurate records of consulting results (challenges, breakthroughs, etc.).  • Develop, implement, and monitor a strategic, comprehensive enterprise and application IT cybersecurity program. • Drive security standards across the organization, including information security policies, procedures, and guidelines. • Create and maintain a security awareness training program. • Analyze and test systems and processes to understand vulnerabilities to cyber threats. • Partner with security experts and outside vendors to ensure all technology platforms meet all security requirements and continue to evolve over time to meet changing needs and best practices. • Continuously and measurably improve technology and data security. • Provide strategic and tactical vision, along with execution-focused on incident prevention, detection, and response. Identify, track, and communicate detailed metrics indicating overall security risk factors. • Ensure the organization's capability to analyze and mitigate security threats. • Work with team members and developers on the design and development of threat deterrence and defense technologies and risk mitigation infrastructure. • Implement an incident response program to identify and respond if any breaches (internal or external) or misuse of data takes place. • Conduct research to understand emerging threats and develop innovative risk management approaches, tools, and analytics to better manage risk. • Brief executive leadership regularly on current cybersecurity threats and challenges, and the status of the information security management system. • Lead the periodic internal risk assessment, document its findings, and develop recommendations to address deficiencies. • Identify areas where automation and machine learning can improve the team’s scalability. • Own the Information Security annual budget and operate within the budget. • Provide leadership, supervision, coaching, and guidance across the team in achievement of organizational and departmental goals. QUALIFICATIONS & REQUIREMENTS • A Bachelor’s degree in Computer Science, Computer/Electrical Engineering, Information Systems, Information Sciences, or a related field with a strong academic record. • MBA or other relevant graduate degree is a plus. Certified Information Systems Security Professional (CISSP) or similar (CISA, CISM, etc.) is a plus. • 7+ years of relevant experience at a hedge fund, family office, or financial institution serving as a Chief Information Security Officer. • 5 or more years of IT implementation experience. • Experience in cloud only, cloud first infrastructure, and deploying cloud information security solutions. • Firm understanding and ability to implement zero-trust security. Firm understanding and experience with Software Defined Networking and Cloud Networking. • Firm understanding of single sign-on and multi-factor authentication platforms. • Experience driving discussions with senior personnel regarding trade-offs, best practices, project management, and risk mitigation. • Firm understanding of work from anywhere models. • Experience with IT compliance and risk management requirements. Job Status • Contractor • Hours are based on the needs of the assigned client (0-40 hours per week). The hourly consulting rate of pay is expected to be a minimum of $250 and a maximum of $400, per hour. The hourly rate will be determined by several factors which may include, but are not limited to, the length of the individual engagement, level of difficulty, level of specialization required, professional designations, skills, and years of experience. Join a well-funded disruptor in finance and technology. Enjoy the flexibility of remote work and choosing your assignments. Be part of a dynamic, high-energy company in its expansion stage. Now is the time to join! For more information, visit us at Arootah.com. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.