Chief Information Security Officer

Join DeluxeBe part of an organization that's driving change and consistently recognized as a top employer. At Deluxe, we know that great people build great companies—and we invest in you accordingly.We're proud to be recognized as a Great Place to Work and a top workplace for Moms, Dads, LGBTQ+ employees, and Veterans.We offer competitive benefits starting on day one, designed to support your life both in and out of work.42% of our employees have stayed for 10+ years, citing our people, benefits, work-life balance, inclusive culture, and team support as key reasons why.Customers entrust Deluxe with some of their most valuable financial data, and as such, security is of utmost importance. The key responsibility of the role is establishing and maintaining a global information security program to adequately protect company and customer information assets and to meet Audit and client security requirements, and proactively creating prevention programs from attackers. The CISO will build upon the existing security frameworks in connection with the emerging cyber industry trends, and mature the program as the company advances its technology modernization efforts and contends with an increasingly complex threat environment and regulatory landscape.Job Functions:Continually evolve and implement world class Information Security program across AppSec, InfoSec, and CorpSec to protect Customer Information, Regulatory and Compliance expectations, and protecting company and customers assets from external Attackers. Partner with technology and business leaders across the company to develop and implement sufficient proactive controls to limit the risk of internal or external attacks.Build, leverage and grow world-class security teams by continually bringing External Perspectives from various Industry and Regulatory Security Forums, and with thoughtful intention towards diversity and inclusion. Develop and build talent necessary to bring innovative solution. Talent strategy includes evaluating current teams, putting together strategies and plans to train, upskill existing teams as well as bring in new talent, building a talent bench strength through dynamic succession plans with focused talent development and career pathing.In partnership with Chief Compliance Office, evolve and ensure ongoing company compliance including exposure to controls around the Service Organization Control 1 and 2 (SOC 1 /SOC 2), NIST 800-30, ISO 27001, Payment Card Industry Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Cloud Security Alliance (CSA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institution Examinations Council (FFIEC) and various other laws and regulations including Executive Orders.Work directly with the Revenue Business Units to facilitate Information Security and availability risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company and client needs compliance and regulatory requirements. Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program. Interact with the Board of Directors, Executive Leadership Team, Risk & Compliance and Privacy teams, as well as Clients and Prospects as required.Oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices. Serves as process owner of ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information, in compliance with the organizations information security policies.Basic Qualifications:Education and Experience: Bachelor's and 10 years or Master's and 8 years, 7 years of Management.Experience managing regulatory and compliance policies.Experience developing information security protection goals, objectives, and metrics consistent with corporate strategic plans.Preferred Qualifications:Education: Masters Degree in Computer Science or Information TechnologyExperience: 10 years in security frameworks and standardsAdditional Basic Qualifications:Must be 18 years of age or olderBenefitsIn line with our commitment to employee wellbeing, our total rewards benefits package is designed to support the physical, financial, and emotional health of our employees, tailored to meet their unique and evolving needs. Our approach considers our employees' whole selves, ensuring they can thrive both in and outside of work. Here are some of the benefits we offer, which may vary based on role, location, or hours worked:Healthcare (Medical, Dental, Vision)Paid Time Off, Volunteer Time Off, and HolidaysEmployer-Matched Retirement PlanEmployee Stock Purchase PlanShort-Term and Long-Term DisabilityInfertility Treatment, Adoption and Surrogacy AssistanceTuition ReimbursementThese benefits are designed to enhance the health, protect the financial security, and provide peace of mind to our employees and their families.Deluxe Corporation is an Equal Employment Opportunity employer: All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, disability, sex, age, ethnic or national origin, marital status, sexual orientation, gender identity or presentation, pregnancy, genetics, veteran status or any other status protected by state or federal law.