Chief Information Security Officer

About the Role:

The Chief Information Security Officer serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organization's information security policies. A key element of the CISO's role is working with executive management to determine acceptable levels of risk for the organization. This position is responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.

In This Role, You will:

• Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program.
• Work directly with the business units to facilitate risk assessment and risk management processes.
• Develop and enhance an information security management control framework that aligns with the organization’s defined strategic objectives.
• Understand and interact with related disciplines through committees to ensure the consistent application of policies and standards across technology projects, systems and services.
• Provide leadership to the enterprise's information security organization.
• Partner with business stakeholders across the company to raise awareness of information security and risk management concerns.
• Develop and continuously enhance a Third Party Risk Management Program as it pertains to the confidentiality, integrity, and availability of organizational systems and data.
• Develop and continuously enhance a Business Continuity capability that provides assurance that the organization can restore and recovery critical business operations in the event of a disruption or disaster.

We’re Looking for People Who Have:

• Degree in business administration or a technology-related field required. 
• Professional security management certification.
• Minimum of eight to 12 years of experience in a combination of risk management, information security and IT jobs.
• Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
• Excellent written and verbal communication skills and high level of personal integrity
• Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams.
• Experience with contract and vendor negotiations and management including managed services.

Full compensation packages are based on candidate experience and relevant certifications.

$200,000—$225,000 USD