Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Title: Chief Information Security Officer (CISO)

The CISO provides strategic leadership for the Council’s enterprise-wide information security program. This role is responsible for protecting digital assets and information systems, aligning cybersecurity with organizational goals, overseeing risk and compliance, and leading the security team. The CISO may also act on behalf of the CIO when needed.

Key Responsibilities

• Define enterprise security strategy, roadmap, and budget aligned with organizational goals and risk posture
• Lead information security teams and ensure operational readiness and cross-division collaboration
• Oversee risk management, compliance, awareness initiatives, and continuous security improvement
• Safeguard digital assets and information systems from internal and external threats
• Report security posture and key risks to leadership
• Establish governance, policies, standards, and incident readiness processes
• Provide knowledge transfer

Qualifications

• Bachelor’s degree with 9+ years of experience or equivalent combination of education and experience
• 5+ years of experience managing staff
• Advanced certifications such as CISSP, CISA, or equivalent
• Strong experience with security frameworks and compliance standards such as NIST, CJIS, HIPAA, ISO, GDPR, and FISMA
• Strong experience with enterprise security tools, systems, and operations
• Strong experience in cybersecurity operations, risk frameworks, and compliance
• High-level conceptual and organizational understanding of how security supports business operations