Chief Information Security Officer

What you'll do

• Develop and execute the enterprise cybersecurity strategy aligned with business risk and regulatory requirements.
• Lead security operations including threat detection, incident response, vulnerability management, and threat intelligence.
• Manage the SOC 2 program from control design through audit engagement.
• Oversee governance, risk, and compliance functions including policy frameworks and state/federal regulations.
• Manage identity governance, privacy strategy, and third-party vendor risk programs.
• Report cybersecurity posture, risk trends, and incident activity to the Board of Directors.
• Lead security engineering by establishing secure design standards and threat modeling practices.
• Oversee disaster recovery and business continuity planning across the enterprise.

What we're looking for

• Must have 10+ years of experience in cybersecurity or information security.
• Must have at least 5 years of experience in a senior security leadership role such as CISO, VP of Security, or Head of Information Security.
• Must have experience working at a regulated, publicly traded company including direct involvement in SOX audit cycles.
• Must have experience with end-to-end ownership of a SOC 2 program including control design and audit preparation.
• Must have a strong GRC background including maintaining risk registers, policy frameworks, and control libraries.
• Must have experience managing third-party and vendor cybersecurity risk programs.
• Must be able to present cybersecurity risk and incident information to boards of directors, audit committees, and regulators.
• Preferred certifications include CISSP, CISM, CRISC, or CISA.