Chief Information Security Officer

SUMMARY The Chief Information Security Officer oversees planning and implementation of the organization’s data security programs. This includes strategy development, risk assessments and mitigation efforts and associated processes, and compliance with relevant laws and regulations. The CISO reports into the CFO as part of the team’s senior leadership team. The role serves as the technical subject matter expert and authoritative voice for all cybersecurity and data protection initiatives across the organization. The CISO will drive a resilience-first approach, emphasizing prevention, rapid detection/response, and business-aligned recovery. Key Responsibilities 1. Information Security Strategy and Policy Development Develop and implement a comprehensive information security strategy aligned with business goals Create, maintain, and enforce security policies, standards, and procedures 2. Risk Management and Compliance Conduct enterprise-wide risk assessments and prioritize security initiatives based on risk exposure.Ensure compliance with applicable laws, regulations, and industry standards (e.g., GDPR, HIPAA, PCI DSS) 3. Security Architecture and Operations Oversee the design and implementation of secure IT architecture and network infrastructure Monitor threat intelligence and respond to emerging cybersecurity threats Manage security operations, including incident detection, response, and recovery Implement Zero Trust principles across network and remote access 4. Leadership and Team Management Lead and mentor security teams, including security analysts, engineers, and incident responders Collaborate with other executives and departments to foster a security-aware culture Lead incident response and disaster recovery planning to ensure minimal business disruption 5. Incident Response and Disaster Recovery Establish and oversee incident response plans for potential cyber attacks or data breaches Coordinate disaster recovery and business continuity planning related to information security 6. Budgeting and Resource Planning Manage budgets for security initiatives and justify investments in technology and personnel Evaluate new security technologies to enhance organizational security posture Skills and Qualifications Extensive experience in information security, risk management, and IT governance Experience with network segmentation, resilient backup strategies, and security culture transformation Knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO 27001) Strong leadership, communication, and strategic planning skills Ability to balance security priorities with business objectives JobFamilyExecutivesJobFunctionInformation TechnologyPayTypeSalary