VP, Chief Information Security Officer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop the strategic framework for enterprise information security and create a multi-year implementation plan.

• Take ownership of the enterprise security architecture encompassing both cloud and on-premise infrastructure, APIs, and internal applications.

• Manage all security policies, standards, and procedures.

• Act as the InfoSec representative during Board of Directors and executive committee meetings.

• Maintain accountability to external regulators, auditors, and cyber insurers.

• Lead the definition of risk appetite and the overall enterprise risk posture.

• Oversee compliance initiatives including SOC 2, NIST CSF, GLBA Safeguards Rule, and ISO 27001.

• Supervise third-party security partners and the selection of security tools.

• Report on the maturity of the security program and key risk indicators.

• Serve as the main liaison to Legal, Risk, and Compliance departments.

• Provide vision and leadership for ongoing security enhancements.

• Offer insights and guidance regarding enterprise IT systems, business operations, and facility defenses.

• Identify potential issues and risks within existing systems.

• Direct the implementation of security policies, activities, and standards.

• Spearhead the development of strategic plans, goals, and policies for various functional areas.

• Collaborate cross-functionally with leadership and the C-Suite to address complex organizational challenges.

• Oversee staffing strategies, division leaders, performance metrics, staff development, and strategic management of personnel.

• Lead geographically dispersed teams with at least 2 direct reports and 5 indirect reports.

• Primarily work in a sedentary office environment during business hours.

⛳️ Requirements

• Bachelor's Degree in a relevant field or an equivalent qualification is preferred.

• A minimum of 10 years of progressive experience in the field of cybersecurity.

• A demonstrated breadth of knowledge in security architecture, risk management, compliance, and security operations.

• At least five years of senior leadership experience.

• CISSP certification is required.

• CISM, CISA, and CRISC certifications are preferred.

• Proven success in developing and scaling enterprise security programs in complex, high-growth settings.

• Hands-on experience with PCI DSS, SOC 2, NIST CSF, GLBA Safeguards Rule, and ISO 27001.

• Extensive knowledge of cloud security solutions, including AWS, GCP, and/or Azure.

• Familiarity with DevSecOps practices and contemporary security tools.

• Strong executive presence and communication abilities to engage with a Board of Directors and articulate technical risks in business terms.

• Experience leading high-performing, geographically distributed teams.

• Prior experience in a CISO role or equivalent responsibilities within a technology firm, financial institution, or regulated fintech.

• Exceptional verbal and written communication skills are required.

• Highly organized and attentive to detail.

• Capability to thrive in a fast-paced, metrics-driven environment is essential.

• Proficiency in Microsoft Office Suite, including Word, Excel, Wiki, collaborative cloud-based tools, and other third-party software applications is required.

• Commitment to the organization's core values.

• Ability to learn new tasks, retain processes, maintain concentration, complete tasks autonomously, and make prompt decisions.

• Proficient in using standard office equipment and keyboards.

• Ability to accurately perceive, distinguish, and interpret visual and auditory information.

• Ability to effectively communicate detailed information verbally.

• Availability during the Monday–Friday business week.

• Willingness to travel 5% of the time or less.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• AD&D insurance

• LTD insurance

• 401(k) with employer matching

• Competitive salary

• Positive work environment