Chief Information Security Officer (CISO)
I
InsurityInsurance software
Location: Remote - USFull-TimeExecutive
Salary216,000 - 325,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Languages
- The English language is required for this position in order to communicate with clients, partners, and colleagues, who are strictly located outside of Québec. French is required for positions permanently located in Quebec.
- Experience
- 8–10 years of progressive experience in information security, cybersecurity, technology risk, or related disciplines; at least 5 years of executive or senior leadership experience in a CISO, Deputy CISO, Head of Security, or comparable role.
- Required Skills
- HIPAA
Requirements
- Bachelor’s degree in information security, computer science, information technology, business, or a related field; equivalent experience may be considered.
- 8–10 years of progressive experience in information security, cybersecurity, technology risk, or related disciplines.
- At least 5 years of executive or senior leadership experience in a CISO, Deputy CISO, Head of Security, or comparable role.
- Experience building and operating an enterprise security program across a distributed or remote organization.
- Experience with HIPAA, ePHI, Business Associate requirements, healthcare data protection, or comparable regulated-data obligations.
- Experience leading security risk assessments, audits, remediation programs, and regulatory or customer assurance activities.
- Experience leading material incidents, crisis response, business continuity, disaster recovery, and executive communications.
- Experience establishing or operating an AI security, AI governance, responsible AI, model-risk, or secure-generative-AI program.
- Strong understanding of cloud and SaaS operating models, identity, encryption, application security, vulnerability management, incident response, and third-party risk.
- Demonstrated ability to manage budgets, partners, vendors, priorities, and complex cross-functional programs.
- Preferred: CISSP, CISM, CISA, CRISC, CCSP, or equivalent certification.
Responsibilities
- Develop and continuously improve enterprise information security strategy, policies, standards, and control frameworks.
- Own and mature the HIPAA compliance and electronic protected health information program.
- Establish and lead the enterprise AI security and governance program.
- Develop risk-based processes for identifying, assessing, treating, and accepting security and technology risks.
- Lead security operations, including monitoring, threat intelligence, vulnerability management, detection and response, and investigations.
- Manage security incident response from inception through resolution, including crisis exercises and post-incident improvements.
- Embed security-by-design across product development, architecture, engineering, DevOps, and change management.
- Oversee cloud security architecture, application security practices, and software supply-chain security.
- Establish risk-based third-party security and privacy programs and address security requirements across information lifecycles.
- Build and lead the security organization, manage its budget and partners, and report security metrics and risks to leadership and the Board.
View Full Description & ApplyYou'll be redirected to the employer's site
