Chief Information Security Officer

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cyber security SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role:

As the Chief Information Security Officer (CISO) for our modern SaaS company, you will hold a critical leadership role in ensuring the security, privacy, and integrity of our digital assets, customer data, and information systems. Your responsibilities will encompass strategic planning, governance, and operational oversight of the company's information security program.  

As a high-visibility position, the CISO exercises strong communication skills and is prepared to positively represent the organization in the community, with investors, and in the media. The CISO maintains the highest level of integrity and leads by example in all areas. They are innovative, nimble when presented with change, and bring a start-up mindset with a hands-on approach. 

What You’ll Do:

Cybersecurity Strategy and Governance:

• Develop and implement a comprehensive cybersecurity strategy that aligns with the company's business objectives and industry best practices. 
• Establish and oversee security governance, risk management, and compliance programs to ensure adherence to relevant regulations and standards. 
• Develop, implement, and maintain company-wide information security policies and procedures taking into account security operations, applications security, and information security. 
• Ensure the highest level of data security and privacy for customer and corporate data, including encryption, access controls, and data classification. 
• Develop and maintain a robust security architecture that encompasses network security, application security, cloud security, and endpoint protection. 
• Ensure compliance of industry regulations, technology standards, and cyber defense frameworks (e.g., GDPR, SOC2, ISO 27001, NIST Cybersecurity, MITRE ATT&CK Matrix Framework) and their practical implementation. 

Product Testing and Management:

• Ensure product design, coding, building, and deployment takes into account latest cybersecurity concerns. 
• Lead product development from a mitigation, detection and prevention standpoint of BeyondTrust solutions. 

Incident Awareness and Response:

• Create and lead an incident response team capable of rapid detection, containment, and resolution of security incidents and breaches. 
• Stay updated on the latest cybersecurity threats, vulnerabilities, and trends, adapting security measures accordingly. 
• Work with CTO, Francisco Partners, and Chief Security Advisor to identify and provide comments on public threats to customers and prospects 

Security Awareness: 

• Promote a culture of security awareness and compliance among employees, conducting regular training and awareness programs. 

Vendor Security:

• Evaluate the security posture of third-party vendors and partners, ensuring compliance with security requirements. 
• Engage other departments in the vendor risk management processes to minimize potential security risks associated with external collaborations. 

Team Leadership:

• Lead a team of cybersecurity professionals, providing guidance, and mentorship. 
• Foster a culture of excellence, innovation, and adaptability. 

Executive Leadership:

• Provide broad executive leadership for go-to-market strategy as part of the overall Executive Leadership Team. 
• Partner with other executives on cross functional projects. 

What You’ll Bring:

• 15+ years of progressive cyber security experience with at least 3 years in a CISO role at a small or mid-size company.  
• Proven experience in a senior information security role with a successful track record in implementing effective security strategies. 
• Strong knowledge of SaaS environments, cloud security, and modern information security frameworks. 
• Exceptional leadership, communication, and interpersonal skills. 
• A commitment to staying current with the latest cybersecurity developments and trends. 

Nice To Have:

• A Bachelor's or Master's degree in Computer Science, Information Security, or a related field. 
• Professional certifications such as CISSP, CISM, or CISA are highly desirable. 
• Public company experience including transitioning from private to public market. 
• SaaS Transition experience. 
• New product roll