Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)Location: TX (Hybrid)BigRio is a Digital Transformation consulting firm headquartered in Boston, MA, specializing in data and analytics, custom development, software implementation, data analytics, and machine learning/AI integrations. As a one-stop shop, we deliver cutting-edge and cost-conscious software solutions to clients across various industries. With diverse industry exposure, our teams of data architects, engineers, developers, and consultants tackle complex software and data challenges, delivering best-in-class solutions.The OpportunityThis role goes beyond traditional security leadership. You will:Architect the security foundation for a rapidly evolving, hybrid ecosystem spanning legacy platforms, modern cloud environments, and advanced data/AI capabilitiesInfluence enterprise transformation, ensuring security is embedded into how we build, operate, and scale—not bolted on after the factElevate cybersecurity to a strategic business function, enabling growth, customer trust, and regulatory confidenceBuild and lead a high-impact team, shaping culture, capability, and long-term security maturityYou will inherit an environment with real complexity—and real opportunity—including large-scale data platforms (e.g., Databricks, Snowflake, and similar), legacy systems, and rapidly growing digital products. Your mandate is to stabilize, modernize, and future-proof.What You'll DoDefine the Security VisionEstablish and execute a forward-looking cybersecurity strategy aligned to enterprise growth and digital transformationPosition security as a business enabler, particularly across data, AI, lab operations, and customer-facing platformsBuild a Modern Security ProgramDesign and implement end-to-end security capabilities across governance, architecture, engineering, and operationsIntroduce scalable frameworks for risk management, policy, and control standardizationSecure Complex Data EcosystemsProtect highly sensitive PHI, genomic, and research data across hybrid environmentsPartner with Data and Engineering teams to embed security into modern data platforms and AI/ML workflowsStrengthen Architecture & EngineeringLead the evolution toward zero trust principles, strong identity and access management, and secure-by-design architecturesAddress foundational gaps in logging, monitoring, access control, and environment consistencyOperationalize Security & ResilienceBuild or enhance threat detection, incident response, and vulnerability management capabilitiesEstablish robust disaster recovery and business continuity aligned to critical operationsDrive Compliance & TrustEnsure alignment with key regulatory and compliance frameworks (e.g., HIPAA, CLIA, and broader healthcare standards)Lead audit readiness and strengthen external trust with customers and partnersPartner Across the BusinessWork closely with lab operations, genomic technology, engineering, compliance, and commercial teamsDrive shared accountability for security outcomes across the organizationWhat Makes You a Strong FitProven track record of collaborating across functions and influencing outcomes without relying on mandates, with a commitment to understanding all stakeholder perspectives and driving solutions that work in practice.Proven success as a CISO, VP, or senior security leader in complex, regulated environmentsExperience building or transforming enterprise security programs at scaleStrong background in hybrid architectures (cloud + on-prem) and modern security practicesDeep expertise in:Identity and access managementSecurity architecture and engineeringThreat detection and incident responseRisk and governance frameworks (e.g., NIST, ISO 27001)Experience securing data platforms and large-scale data environments (e.g., Databricks, Snowflake, or similar ecosystems)Familiarity with or exposure to Centers for Medicare & Medicaid Services Acceptable Risk Standards (CMS ARS) is a plusLeadership profile:Strategic and forward-thinking, with the ability to translate risk into business impactHands-on when needed—comfortable operating in both build and scale modesStrong communicator and influencer at the executive and board levelCollaborative leader who can align diverse stakeholders across technical and non-technical domainsComfortable operating in an environment with ambiguity, urgency, and high expectationsWhy Join UsMission-driven impact: Your work directly contributes to better patient outcomes and the future of precision medicineExecutive visibility and influence: Direct partnership with CIO and senior leadershipTransformational scope: Opportunity to build a modern security program in a high-growth, data-rich environmentComplex, meaningful challenges: Secure one of the most sensitive and valuable data ecosystems in healthcareSuccess in This RoleIn your first 3–6 months, you will:Establish a clear security vision and roadmap aligned to business prioritiesDeliver measurable improvements in risk visibility, control maturity, and resilienceImplement foundational capabilities across IAM, monitoring, and incident responseBuild credibility as a trusted advisor and business enabler across the organization