Chief Information Security Officer – CISO

This is a fully remote position, open to applicants in Iowa.

📋 Description

• Formulate and implement the enterprise cybersecurity strategy along with a multi-year security roadmap.

• Create and uphold information security policies, standards, procedures, and governance frameworks.

• Direct cybersecurity risk management, security operations, threat detection, vulnerability management, and security monitoring initiatives.

• Deliver cybersecurity updates, risk evaluations, and strategic advice to executive leadership.

• Spearhead cybersecurity awareness and training initiatives.

• Ensure adherence to HIPAA, HITRUST, NIST, PCI-DSS, SOC, and other relevant frameworks.

• Supervise security audits, risk evaluations, penetration testing, control validation, and remediation efforts.

• Manage third-party security assessments, vendor risk evaluations, and cybersecurity due diligence.

• Oversee the enterprise infrastructure strategy encompassing Microsoft Azure, networking, endpoint computing, identity management, collaboration platforms, and enterprise systems.

• Lead Azure architecture, cloud governance, infrastructure engineering, automation, platform modernization, and technology lifecycle management.

• Supervise Azure, Microsoft 365, Entra ID, Intune, Microsoft Defender, and associated platforms.

• Guide enterprise service management, technical support, help desk operations, and end-user computing services.

• Enhance service quality, response times, user satisfaction, automation, self-service, and process optimization initiatives.

• Manage IT/technical business continuity planning and disaster recovery programs.

• Set RTOs, RPOs, availability standards, and resilience requirements.

• Direct disaster recovery planning, testing, tabletop exercises, failover testing, and recovery validation.

• Develop procedures for technology crisis management.

• Lead enterprise incident response, cyber crisis management, and major technology incident responses.

• Establish security monitoring, detection, investigation, containment, and response capabilities.

• Coordinate efforts among internal teams, managed security partners, and external stakeholders during incidents.

• Create security-event reporting and lessons-learned initiatives.

• Oversee security, infrastructure, cloud, and support operational and capital budgets.

• Negotiate vendor contracts, service agreements, and licensing arrangements.

• Build and cultivate teams across cybersecurity, infrastructure, cloud operations, technical support, and IT operations.

• Set performance expectations, career development, succession planning, and leadership development programs.

• Align technology capabilities with strategic business objectives and advocate for organizational change management.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.

• Over 12 years of progressive technology leadership experience.

• More than 5 years of leadership experience overseeing cybersecurity, infrastructure, cloud, and/or technology operations teams.

• Proven experience in leading enterprise cybersecurity programs and technology risk management initiatives.

• Strong background in managing Microsoft Azure cloud environments and Microsoft enterprise technologies.

• Comprehensive knowledge of cybersecurity frameworks, governance practices, risk management methodologies, and regulatory compliance standards.

• Experience in leading incident response, crisis management, IT/technical business continuity, and disaster recovery initiatives.

• Demonstrated ability to influence executive stakeholders and advance enterprise-wide technology initiatives.

• Strong capabilities in financial management, strategic planning, and organizational leadership.

• Experience in healthcare, food manufacturing, supply chain, logistics, or other highly regulated sectors.

• Familiarity with HIPAA, HITRUST, NIST Cybersecurity Framework, Microsoft Security solutions, and cloud security best practices.

• Proven success in leading enterprise cloud transformations and enhancing cybersecurity maturity initiatives.

• Involves repetitive motions of the wrists, hands, and/or fingers.

• Sedentary work primarily requires sitting and remaining in a stationary position for extended periods.

• Visual acuity necessary to perform job functions, including peripheral vision, depth perception, and the ability to adjust focus.

🏝️ Benefits

• Paid time off (PTO), holiday pay, and a holiday of choice.

• 401(k) matching.

• Life insurance coverage.

• Short-term disability benefits.

• Health, dental, and vision insurance options.

• Maternity/paternity leave available.

• Health savings account (HSA).

• Flexible spending accounts (FSA) for health and dependents.