Job Description: We are seeking a highly experienced Senior Cybersecurity Information Security Officer (CISO) to lead our cybersecurity efforts and ensure the highest level of security for our organization's information systems. This role requires an expert with a deep understanding of cybersecurity threats, security frameworks, and risk management, with a minimum of 8 years of relevant IT experience, including at least 5 years in cybersecurity and information security management. The ideal candidate will have strong expertise in security frameworks and standards like ISO 27001, NIST, and GDPR, and will be responsible for developing and executing a comprehensive security strategy to safeguard sensitive information and systems. This position is fully remote on EST hours.
\n Responsibilities:Strategic Security Leadership:Lead the development and execution of the organization's cybersecurity and information security strategies, ensuring alignment with business goals.Provide guidance to senior leadership and key stakeholders on emerging threats, vulnerabilities, and security risks.Lead security governance processes to ensure effective risk management and compliance with regulations and industry standards.Security Frameworks and Compliance:Implement and maintain security frameworks and standards, including ISO 27001, NIST, GDPR, and others, ensuring compliance with regulatory requirements and best practices.Establish and maintain security policies, procedures, and guidelines to safeguard organizational assets.Risk Management and Incident Response:Conduct risk assessments and vulnerability audits to identify potential security threats and recommend mitigation strategies.Lead incident response efforts, manage security breaches, and ensure timely reporting and resolution of incidents.Oversee and regularly test disaster recovery and business continuity plans to ensure organizational resilience.Security Operations and Architecture:Oversee the day-to-day security operations, including monitoring, threat detection, and response.Collaborate with IT and engineering teams to design and implement secure architectures, systems, and processes.Implement and manage advanced security technologies and solutions, including firewalls, intrusion detection/prevention systems, encryption, and endpoint protection.Security Awareness and Training:Develop and lead security awareness programs to educate employees on best practices for data protection and cybersecurity.Provide ongoing training to ensure compliance with security policies and cultivate a security-first culture across the organization.Vendor and Third-Party Risk Management:Assess the security posture of third-party vendors and service providers to ensure compliance with security standards.Manage contracts and relationships with security solution providers and vendors.
\n$110,000 - $140,000 a year
\n