Chief Information Security Officer

ROLE SUMMARY

Below covers everything you need to know about what this opportunity entails, as well as what is expected from applicants.

As we expand our operations, we seek a seasoned Chief Information Security Officer (CISO) with robust expertise in both cyber security and enterprise network management to safeguard our digital assets and ensure compliance with industry standards.

The CISO will lead and oversee the information security strategy to protect the organization’s assets, data, and reputation.

This role requires a strategic thinker with deep technical knowledge and proven experience in both cybersecurity and enterprise network infrastructure that enjoys being a hands-on player-coach.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Strategic Leadership :
• Develop, implement, and manage the organization’s information security strategy, policies, and procedures.
• Establish and maintain a security framework to support business goals and ensure compliance with regulatory requirements (e.g., GDPR, PCI-DSS, SOX).
• Communicate security risks and mitigation strategies to senior management and stakeholders.
• Network Security Management :
• Oversee the design, implementation, and maintenance of enterprise network security infrastructure, including firewalls, intrusion detection / prevention systems, and VPNs.
• Ensure network architecture is aligned with best practices for security and scalability.
• Incident Response and Risk Management :
• Lead incident response efforts, including detection, containment, and recovery from security breaches.
• Conduct risk assessments and vulnerability analyses to identify and address potential threats.
• Compliance and Governance :
• Ensure adherence to internal policies and external regulatory requirements related to information security and data protection.
• Manage audits and assessments, working with external auditors and regulatory bodies as needed.
• Team Leadership and Development :
• Build and manage a high-performing information security and network security team.
• Foster a culture of security awareness through training and development programs for staff.
• Collaboration and Communication :
• Work closely with IT, legal, and compliance teams to integrate security considerations into all business processes.
• Serve as a liaison with external vendors and partners to ensure third-party security practices meet organizational standards.

KNOWLEDGE SKILLS AND ABILITIES

• Minimum of 7-10 years of experience in information security, with at least 3 years in a senior management role.
• Strong understanding of and comfort with NIST.
• Proven expertise in enterprise network architecture, including experience with network security tools and technologies.
• Strong knowledge of regulatory frameworks and industry standards relevant to financial services.
• Excellent problem-solving, analytical, and communication skills.
• Ability to manage multiple priorities in a fast-paced environment.

EDUCATION

Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field; master’s degree preferred.

LICENSES

• ITIL Foundations Certification or awareness.
• Relevant certifications such as CISSP, CISM, CISA, or equivalent.

J-18808-Ljbffr