Chief Information Security Officer

Requirements: 10+ years of experience in cybersecurity with 5+ years in leadership roles. The ideal candidate will possess deep expertise in compliance frameworks (SOC 2, ISO 27001, GDPR) and hold a CISSP certification. Additionally, they should have executive communication and board-level reporting experience.

Responsibilities: As a CISO, this position entails defining and executing the enterprise security strategy and roadmap, building and leading the security team across App Sec, Infra Sec, and GRC functions, and managing vendor risk assessments and regulatory compliance programs. This role requires strong leadership skills, with the ability to mentor and develop a high-performing team. The CISO will work closely with cross-functional teams, including engineering, product, and executive leadership, to ensure the integration of security into all aspects of the business.

They will be responsible for developing and implementing security policies, procedures, and standards, as well as monitoring and reporting on security-related metrics and key performance indicators (KPIs). The CISO will also be responsible for identifying and mitigating security risks, and ensuring compliance with relevant laws, regulations, and industry standards. This role requires excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders.

The CISO will be a strategic thinker, with the ability to balance business needs with security requirements. They will be a collaborative leader, with a strong focus on building and maintaining relationships with key stakeholders, including executive leadership, customers, and partners. They will also be responsible for overseeing the development and implementation of incident response plans, business continuity plans, and disaster recovery plans.

Additionally, they will work closely with the IT and engineering teams to ensure that security is integrated into all aspects of the business, including the development and deployment of new applications and services. The CISO will also be responsible for managing security-related budgets and resources, and ensuring that security investments are aligned with business objectives. They will be a key member of the executive leadership team, providing strategic guidance and counsel on security-related matters.

Cybersecurity expertise: The CISO will have deep expertise in compliance frameworks (SOC 2, ISO 27001, GDPR) and hold a CISSP certification. They will be able to design and implement comprehensive security programs that align with industry best practices. They will have a strong understanding of security technologies, including firewalls, intrusion detection and prevention systems, encryption, and secure access controls. They will also be familiar with security frameworks and standards, such as NIST Cybersecurity Framework and ISO 27001.

Leadership and management: The CISO will have 5+ years of experience in leadership roles and be able to mentor and develop a high-performing team. They will have excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders. They will be a strategic thinker, with the ability to balance business needs with security requirements.

They will be a collaborative leader, with a strong focus on building and maintaining relationships with key stakeholders, including executive leadership, customers, and partners.

Communication and interpersonal skills: The CISO will have excellent communication and interpersonal skills, with the ability to effectively communicate security-related information to both technical and non-technical stakeholders. They will be able to build and maintain relationships with key stakeholders, including executive leadership, customers, and partners.

Strategic thinking and problem-solving: The CISO will be a strategic thinker, with the ability to balance business needs with security requirements. They will be able to identify and mitigate security risks, and ensure compliance with relevant laws, regulations, and industry…