Vice President, Deputy CISO

About Arctic Wolf

At Arctic Wolf, you won't just watch the cybersecurity industry evolve – you'll help lead the change. Our global Pack is made up of people who thrive on solving hard problems, moving fast, and building technology that protects organizations around the world. We're proud to be recognized by Forbes, CNBC, Fortune, CRN, Gartner Peer Insights and IDC Market Scape – but what matters most is the work behind it: delivering real outcomes for customers through award winning innovation like our Aurora Platform.

If you're looking for meaningful work, smart teammates and the chance to make a real impact in a high-growth company that’s redefining security operations, Arctic Wolf is the right place for you! Our mission is simple:
End Cyber Risk. We’re looking for a Vice President, Deputy CISO to be a part of making that happen.

You are an information security leader with deep experience across all domains of information security, with particular strength in governance, risk management, and compliance (GRC), and a proven record of directly managing technical security teams. You know how to build trust and influence outcomes across the organization, using your domain knowledge, prior experience, and executive presence to engage both technical and business leaders.

Reporting to the Chief Information Security Officer (CISO), the Vice President, Deputy Chief Information Security Officer (Deputy CISO) is the direct people manager for Security Engineering, Security Operations (Sec Ops), and Governance, Risk, and Compliance (GRC), with full accountability for the strategy, staffing, performance, and budget of each function. The Deputy CISO ensures the enterprise’s personnel, data, and assets are protected against current and emerging threats, and provides leadership continuity for the security program in the CISO’s absence.

must work in the Pleasant Grove, Utah office, not taking remote applicants at this time.

• Directly manages the Security Engineering, Security Operations (Sec Ops), and GRC functions, including hiring, performance management, and development of each team’s leadership.
• Sets strategy and priorities across security engineering, security operations, and GRC, ensuring the three functions operate as one coordinated program.
• Owns the organization’s security governance framework and compliance posture against industry frameworks and regulations (e.g., SOC 2, ISO 27001/27701, NIST CSF/800-53, PCI DSS, GDPR, CCPA), including third-party risk management and audit oversight.
• Oversees the security engineering roadmap and the operation of security monitoring, threat detection, and incident response, including post-incident governance and regulatory notification.
• Owns the enterprise security risk management program, including risk assessment, treatment, reporting, and the organization’s risk register.
• Manages the combined budget for security engineering, Sec Ops, and GRC, and contributes to enterprise security budget planning alongside the CISO.
• Provides leadership continuity in the CISO’s absence, including strategy execution, decision-making, and representation at the executive and board levels.
• Delivers security metrics, KPIs, and risk reporting to executive leadership, the board, and audit or risk committees.
• Partners with Legal and Privacy to align security requirements with contractual, regulatory, and privacy obligations, including customer due diligence and RFP responses.
• Acts as a representative for Arctic Wolf’s security and compliance posture with customers, auditors, regulators, and senior executives.

• 8+ years of leadership experience directly managing security engineering, security operations, or GRC teams.
• 10+ years of progressive information security experience spanning both technical security engineering functions and GRC.
• Demonstrated experience building and leading enterprise risk management programs, including risk assessment, risk registers, and reporting to executive leadership.
• Demonstrated experience managing SOC 2, ISO 27001, or similar certification and audit processes from initiation through completion.
• Experience…