Chief Information Security Officer

Be part of an organization that’s driving change and consistently recognized as a top employer. At Deluxe, we know that great people build great companies—and we invest in you accordingly. We’re proud to be recognized as a Great Place to Work and a top workplace for Moms, Dads, LGBTQ+ employees, and Veterans. We offer competitive benefits starting on day one, designed to support your life both in and out of work.

42% of our employees have stayed for 10+ years, citing our people, benefits, work‑life balance, inclusive culture, and team support as key reasons why. Customers entrust Deluxe with some of their most valuable financial data, and as such, security is of utmost importance. The key responsibility of the role is establishing and maintaining a global information security program to adequately protect company and customer information assets and to meet Audit and client security requirements, and proactively creating prevention programs from attackers.

The CISO will build upon the existing security frameworks in connection with the emerging cyber industry trends, and mature the program as the company advances its technology modernization efforts and contends with an increasingly complex threat environment and regulatory landscape.

Continually evolve and implement world class Information Security program across App Sec, Info Sec, and Corp Sec to protect Customer Information, Regulatory and Compliance expectations, and protecting company and customers assets from external Attackers. Partner with technology and business leaders across the company to develop and implement sufficient proactive controls to limit the risk of internal or external attacks. Build, leverage and grow world‑class security teams by continually bringing External Perspectives from various Industry and Regulatory Security Forums, and with thoughtful intention towards diversity and inclusion.

Develop and build talent necessary to bring innovative solution. Talent strategy includes evaluating current teams, putting together strategies and plans to train, upskill existing teams as well as bring in new talent, building a talent bench strength through dynamic succession plans with focused talent development and career pathing. In partnership with Chief Compliance Office, evolve and ensure ongoing company compliance including exposure to controls around the Service Organization Control 1 and 2 (SOC 1 /SOC
2), NIST 800‑30, ISO 27001, Payment Card Industry Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Cloud Security Alliance (CSA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institution Examinations Council (FFIEC) and various other laws and regulations including Executive Orders. Work directly with the Revenue Business Units to facilitate Information Security and availability risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.

Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company and client needs compliance and regulatory requirements. Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program. Interact with the Board of Directors, Executive Leadership Team, Risk & Compliance and Privacy teams, as well as Clients and Prospects as required.

Oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices.…