VP of Information Security & Risk Management

Job Description

Job Description

We are looking for an accomplished security executive to lead the organization’s information security, risk management, and compliance efforts from an enterprise perspective. This role will shape a forward-looking security strategy that supports business goals, strengthens regulatory alignment, and promotes resilient operations across the company. Based in Nashville, Tennessee, this leader will work closely with executives, internal teams, clients, and external partners to guide decision-making, elevate governance, and oversee response readiness.

Responsibilities:
• Develop and lead a company-wide information security and risk management roadmap that supports strategic business objectives and long-term growth.
• Convert executive priorities into practical security programs, measurable initiatives, and effective control frameworks across the enterprise.
• Establish meaningful performance and risk metrics to evaluate security maturity, track progress, and inform leadership decisions.
• Direct governance, risk, and compliance activities by maintaining policies, standards, and control practices that meet regulatory and organizational expectations.
• Oversee audit preparation, regulatory reviews, and corrective action plans to ensure timely remediation and sustained compliance.
• Provide executive leadership during cybersecurity incidents by guiding escalation, communication, containment, and recovery efforts.
• Lead senior security teams responsible for monitoring threats, managing vulnerabilities, and reducing enterprise risk through coordinated operational execution.
• Represent the organization in security-related discussions with clients, vendors, and business partners, including assessments, due diligence, and contractual security matters.
• Build and develop a high-performing security leadership structure by mentoring managers and directors, setting priorities, and aligning resources to business needs.• Extensive leadership experience in information security, cybersecurity, risk management, or a closely related executive function.
• Demonstrated success creating enterprise security strategies and translating them into scalable programs and operational results.
• Strong knowledge of governance, risk, and compliance practices, including policy development, control oversight, and audit support.
• Experience leading executive-level incident response coordination and working across technical and business teams during high-impact events.
• Ability to engage effectively with senior leadership, clients, vendors, legal teams, and cross-functional stakeholders on security and risk matters.
• Familiarity with core security technologies and concepts, including network security tools such as Cisco ASA Firewall and broader cyber defense practices.
• Proven leadership capabilities in building teams, developing talent, and driving accountability within complex organizational environments.
• Working knowledge of IT strategy and the ability to collaborate within Agile Scrum or similarly structured delivery environments.