VP of Information Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee a contemporary, business-oriented information security program within the organization’s Microsoft-centric environment.

• Administer risk-based security initiatives and controls that align with business objectives.

• Ensure secure identity and access controls, proper configurations, high availability, and resilience with vendors.

• Collaborate with the Managed Service Provider (MSP) and IT to develop secure, scalable, and fault-tolerant systems.

• Supervise monitoring, logging, alerting, and metrics related to security and reliability.

• Direct incident response efforts, conduct root cause analysis, and implement corrective actions.

• Manage the relationship with the MSP, including Service Level Agreements (SLAs), security monitoring, alert triage, vulnerability management, desktop maintenance, and issue resolution.

• Lead SSAE 18/SOC audits, including preparation and coordination of remediation efforts.

• Develop and maintain policies, standards, and documentation.

• Co-manage business continuity and disaster recovery programs and take part in testing activities.

• Evaluate and track third-party security posture and vendor-related risks.

• Provide security training and awareness initiatives.

• Remain updated on emerging threats and best practices in the field.

• Report directly to the CIO and work closely with internal teams, vendors, the MSP, COO, and leadership.

⛳️ Requirements

• Approximately 7–12 years of experience in information security, cloud security, or similar roles.

• Proficient in Azure and/or Microsoft 365 security and architecture.

• Background in monitoring, incident response, and cloud operations.

• Familiarity with modern infrastructure practices and automation.

• Experience collaborating with MSPs or external service providers.

• Knowledge of SOC/SSAE 18 and regulated environments.

• Hands-on, accountable, with a blend of strategic and technical expertise.

• Strong ability to collaborate across technology, operations, and leadership teams.

• Capability to remain seated for prolonged periods.

• Dexterity to use a computer keyboard, mouse, and other devices.

• Physical ability to engage in training sessions, presentations, and meetings.

🏝️ Benefits

• Some travel is required to meet with management, employees, and attend occasional credit union client meetings.