Chief Information Security Officer

Overview

The Chief Information Security Officer (CISO) is responsible for establishing, executing, and continuously evolving the enterprise cybersecurity and information risk management strategy. The CISO provides executive leadership for the protection of customer, policyholder, employee, and corporate information assets while enabling business growth, innovation, digital transformation, and regulatory compliance.

The CISO serves as a trusted advisor to executive leadership and the Board of Directors, ensuring cybersecurity risks are effectively identified, managed, communicated, and aligned with the organization's strategic objectives. The role oversees enterprise security governance, cyber defense, privacy collaboration, operational resilience, and regulatory readiness across all business units.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.
• Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements
• Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.
• Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.
• Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.
• Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.
• Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.
• Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations functions, including incident response, threat management, security monitoring, and cyber resilience capabilities.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.
• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.
• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.

Preferred:

• Professional certifications such as: CISSP, CISM, CISA, CRISC, CCSP

What We Offer

AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.

AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.

AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.