Vice President, Information Security

This is a fully remote position, open to applicants in Michigan.

📋 Description

• Develop and implement a long-term enterprise cybersecurity strategy and roadmap.

• Set security priorities informed by business risks and the current threat landscape.

• Define cybersecurity policies, standards, controls, and operational procedures.

• Provide executive leadership with insights into cyber risk and the overall security posture.

• Oversee enterprise security operations and cyber defense initiatives.

• Manage SOC, SIEM, EDR/XDR, MDR/MSSP, security monitoring, and threat detection efforts.

• Enhance detection, investigation, and response capabilities.

• Establish and sustain the enterprise cyber incident response program.

• Lead responses to major cybersecurity incidents.

• Develop and keep updated incident playbooks, conducting tabletop exercises and cyber simulations.

• Fortify cyber resilience in collaboration with business continuity and disaster recovery teams.

• Implement identity and access security practices across workforce, privileged, third-party, and application identities.

• Direct vulnerability and exposure management while developing threat intelligence capabilities.

• Create enterprise information security architecture and principles of security-by-design.

• Integrate security into products, applications, cloud platforms, and digital user experiences.

• Define security requirements for applications, APIs, data, and customer-facing digital platforms.

• Collaborate with development teams on secure SDLC and application security practices.

• Enhance data protection, encryption, and privacy controls.

• Set cybersecurity requirements for critical vendors and manage third-party cyber risks.

• Partner with Procurement, Legal, Risk, Compliance, Internal Audit, and Audit teams.

• Maintain cybersecurity control frameworks and policies, leading the remediation of assessments and audit findings.

• Support regulatory, privacy, PCI, and compliance obligations.

• Lead, develop, and retain a high-performing information security organization.

• Establish accountability, KPIs, and operational rhythms.

• Manage cybersecurity operating and capital budgets.

• Lead strategic cybersecurity vendors and managed security service providers.

• Foster partnerships across technology and business sectors.

• Clearly communicate complex cybersecurity risks in business and financial terms.

⛳️ Requirements

• 10–15+ years of progressive experience in information security or cybersecurity.

• 5+ years of leadership experience managing cybersecurity teams.

• Proven experience leading enterprise cybersecurity transformation efforts.

• Strong understanding of security operations, IAM, cloud security, application security, vulnerability management, incident response, and cyber risk.

• Experience managing large budgets and strategic vendor relationships.

• Excellent executive communication and influencing skills.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred.

• CISSP, CISM, CRISC, or an equivalent certification preferred.

• Employment eligibility verification through E-Verify is required.

• Compliance with applicable Right to Work requirements is mandatory.

🏝️ Benefits

• Equal opportunity employer.

• Participation as a federal contractor in the E-Verify program.

• Adherence to Right to Work requirements.

• Official E-Verify and Right to Work notices available in both English and Spanish.