Chief Information Security Officer

Posted 6 days agoViewed

View full description

💎 Seniority level: Executive, 10+ years

📍 Location: United States

💸 Salary: 200000.0 - 350000.0 USD per year

🔍 Industry: Software Development

⏳ Experience: 10+ years

🪄 Skills: AWSCybersecurityLDAPMicrosoft Active DirectoryCI/CDDevOpsComplianceRisk ManagementSaaS

Requirements:

10+ years in information security, with at least 5 years in a leadership role, ideally within SaaS or high-growth environments.
Proven track record of securing dynamic, cloud-based platforms (strong preference for AWS).
Expertise in implementing and monitoring adherence to compliance frameworks (e.g., SOC 2 Type 2, ISO 27001, FedRAMP).
Experience leading security teams, conducting audits, and managing security incident response in a SaaS environment.

Responsibilities:

Develop and Lead Security Strategy: Create and implement a comprehensive security vision that safeguards Webflow’s infrastructure, products, user data, and company data.
Drive Cross-Functional Collaboration: Partner with engineering, product, legal, compliance, and executive leadership to embed security into every layer of our business.
Ensure Regulatory Compliance: Oversee compliance with security-related regulations such as GDPR, SOC 2 Type 2, ISO 27001, and ISO 42001 ensuring robust data privacy and integrity.
Respond to Emerging Threats: Proactively identify, assess, and mitigate cybersecurity risks in Webflow’s dynamic, cloud-first environment.
Establish Metrics and Reporting: Define and report on key security program metrics to measure the maturity and effectiveness of security initiatives.
Foster a Security-Conscious Culture: Lead initiatives to educate employees and customers about cybersecurity best practices.

Apply

Related Jobs

Apply

🔥 Chief Information Security Officer (CISO)

Posted 2 days ago

📍 Netherlands, United States, United Kingdom, Canada

🔍 Martech

🔧 Requirements

10-15 years of experience in a senior leadership Security role within a SaaS or software-driven environment, with demonstrated ability to adapt in an evolving technology landscape.
Deep expertise in cybersecurity frameworks, risk management, and compliance requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, CCPA).
Experience with Cloud Security, DevSecOps practices, and modern security architectures.
Deep understanding of security technologies, protocols, and frameworks.
Experience managing incident response, disaster recovery, and business continuity planning.
Experience developing and implementing AI security and governance programs to ensure the secure and ethical use of AI technologies within the company. This includes risk assessment, compliance with regulatory standards, security controls, and continuous monitoring of AI systems to mitigate potential threats and vulnerabilities

💡 Responsibilities

Design and lead an innovative cybersecurity strategy that aligns with our company's growth and vision.
Develop and enforce crystal-clear security policies, procedures, and best practices that keep us ahead of emerging threats, keeping our data safe and our customers confident.
Oversee compliance with regulatory requirements and industry standards (e.g. ISO 27001, SOC 2, GDPR, and CCPA).
Collaborate with engineering and IT teams in multiple countries to integrate security best practices into software development and infrastructure management.
Lead incident response efforts, ensuring swift identification, mitigation, and reporting of security breaches.
Drive security awareness training and education, cultivating a proactive, security-minded culture throughout the company.
Evaluate and implement security technologies and tools to enhance threat detection and prevention.
Act as the primary security liaison for external stakeholders, including customers, auditors, and regulatory bodies.
Take an active role in all Security functions.

AWSLeadershipCloud ComputingCybersecurityAzureDevOpsComplianceRisk Management

Posted 2 days ago

Apply

🔥 Chief Information Security Officer (CISO)

Posted 14 days ago

📍 Netherlands, United States, United Kingdom, Canada

🔍 SaaS

🏢 Company: BlueConic👥 101-250💰 about 3 years agoDatabase Digital Marketing Real Time Predictive Analytics SaaS Data Integration Analytics Marketing Data Visualization Software

🔧 Requirements

10-15 years of experience in a senior leadership Security role within a SaaS or software-driven environment, with demonstrated ability to adapt in an evolving technology landscape.
Deep expertise in cybersecurity frameworks, risk management, and compliance requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, CCPA).
Experience with Cloud Security, DevSecOps practices, and modern security architectures.
Deep understanding of security technologies, protocols, and frameworks.
Experience managing incident response, disaster recovery, and business continuity planning.
Experience developing and implementing AI security and governance programs to ensure the secure and ethical use of AI technologies within the company. This includes risk assessment, compliance with regulatory standards, security controls, and continuous monitoring of AI systems to mitigate potential threats and vulnerabilities
A passion for fostering a culture of security consciousness and continuous improvement.

💡 Responsibilities

Design and lead an innovative cybersecurity strategy that aligns with our company’s growth and vision.
Develop and enforce crystal-clear security policies, procedures, and best practices that keep us ahead of emerging threats, keeping our data safe and our customers confident.
Oversee compliance with regulatory requirements and industry standards (e.g. ISO 27001, SOC 2, GDPR, and CCPA).
Collaborate with engineering and IT teams in multiple countries to integrate security best practices into software development and infrastructure management.
Lead incident response efforts, ensuring swift identification, mitigation, and reporting of security breaches.
Drive security awareness training and education, cultivating a proactive, security-minded culture throughout the company.
Evaluate and implement security technologies and tools to enhance threat detection and prevention.
Act as the primary security liaison for external stakeholders, including customers, auditors, and regulatory bodies.
Take an active role in all Security functions.

AWSLeadershipCloud ComputingCybersecurityPeople ManagementCross-functional Team LeadershipAzureCommunication SkillsAnalytical SkillsDevOpsComplianceRisk ManagementStrategic thinking

Posted 14 days ago

Apply

🔥 Chief Information Security Officer

Posted 14 days ago

📍 United States

🔍 Pet Health

🔧 Requirements

15+ years of experience leading Information Security teams in $1B+ global organizations
Experience with outsourcing / managed services of infrastructure services
Expertise with a cyber security framework like NIST or CIS required
Experience with both enterprise IT and product development including DevSecOps
Familiarity with PCI, GDPR, CCPA and other relevant privacy and security regulations

💡 Responsibilities

Develop and implement a strategic, long-term information security strategy and roadmap to ensure that IPH’s formation assets are adequately protected.
Work with senior leaders across businesses to assess and communicate acceptable levels of risk and approaches to mitigate that risk.
Identify, evaluate, and report on information security risks, practices and projects to the Executive Committee and the Board of Directors, and provide subject matter expertise on security standards and best practices
Lead the development of up-to-date information security policies, procedures, standards, and guidelines, and oversee their approval, dissemination, and maintenance.
Ensure the security management program complies with applicable laws, regulations, and contractual requirements.
Act as the champion for the enterprise information security program and foster a security-aware culture.
Oversee the evaluation, selection, architecture, and implementation of information security solutions that are innovative, cost-effective, and minimally disruptive.
Partner with architects, infrastructure, and product development teams to ensure that technologies are developed and maintained according to security policies and guidelines.
Ensure our product portfolio adheres to rigorous cyber security standards and that application development teams foster a security-first approach throughout the software development life cycle leveraging a DevSecOps approach
Manage regular intrusion detection and vulnerability reporting, internal and external IT audit groups reviews, and the coordination of all required fixes.
Develop business metrics to measure the effectiveness of the security management program and increase the maturity of the program over time.
Monitor the industry and external environment for emerging threats and advise relevant stakeholders on appropriate courses of action.
Oversee incident response planning and the investigation of security breaches, and assist with any associated disciplinary, public relations and legal matters.
Oversee and lead the creation, communication, and implementation of a process for managing vendor risk and other third-party risk.
Lead due diligence and post integration activities related to information security for all M&A activity.
Develop, mentor, and manage a high performing staff of information security professionals.

LeadershipCloud ComputingCybersecurityMicrosoft Active DirectoryPeople ManagementStrategic ManagementCommunication SkillsAnalytical SkillsCollaborationCI/CDProblem SolvingRESTful APIsDevOpsTime ManagementComplianceRisk ManagementData management

Posted 14 days ago

Apply

🔥 Chief Information Security Officer

Posted 4 months ago

📍 United States

💸 260000.0 - 310000.0 USD per year

🔍 Healthcare

🏢 Company: SimplePractice👥 501-1000 SaaS Health Care Software

🔧 Requirements

12-15+ years of experience building and scaling information security, risk management and compliance programs within large, complex organizations
Previous experience as a CISO or equivalent at a SaaS company or healthcare provider.
Deep expertise in security, privacy and IT audit frameworks, such as HITRUST CSF and regulatory standards such as HIPAA and PCI
Extensive experience with risk management, incident response, crisis management threat intelligence and developing secure business practices
Strong experience in technical security areas including penetration testing, vulnerability management, mobile security, cloud security and network security
Experience with secure coding practices, identity and access management and security incident response
Strong communication skills with demonstrated ability to communicate complex surety concepts to executive leaders, to customers and other non-technical audiences
Experience working with high velocity software deployment environments
Demonstrated people management skills - ability to motivate, mentor and grow a small team of highly committed security professionals while balancing strategic vision and day-to-day operations
A passion for helping private practices thrive in the mental wellness space
Bachelor’s degree in a related field; advanced certifications such as CISSP, CISM or CISA preferred

💡 Responsibilities

Create and own execution of the long-term cybersecurity and application security vision, strategy and roadmap, aligned with SimplePractice’s growth and product roadmap
Protect the privacy, availability, and integrity of client data
Establish proactive security measures to detect, prevent and mitigate cyberattacks (threat intelligence)
Partner with teams across the organization to establish and sustain a security-conscious culture, including the development and implementation of security policies, standards, guidelines and awareness programs
Provide thought leadership on contemporary security operations and be a market leader in establishing trust through security
Support GTM strategies to utilize security and compliance for commercial benefit
Anticipate strategic and scaling-related difficulties through collaborative long-term planning with key stakeholders, including identifying, assessing, and mitigating security risks.
Conduct ongoing evaluations of SimplePractice’s risk profile, identifying gaps and implementing a robust risk management framework
Oversee the management of enterprise-wide cybersecurity programs, including incident response and crisis management, 24x7 security operations, security architecture, security contingency plans and threat intelligence
Identify and mitigate security risks, recommending both technical and business controls to prevent vulnerabilities
Ensure compliance with applicable security regulations (such as HIPAA, HITRUST, PCI)
Obtain and maintain certifications that establish credibility in the marketplace. Deliver overall strategy for future certifications.

Cloud ComputingCybersecurityComplianceRisk ManagementSaaS

Posted 4 months ago

Apply