Chief Information Security Officer

Civeo is seeking a strategic and experienced senior IT security leader to serve as our next Chief Information Security Officer.  This opportunity follows the planned retirement of our CISO after 12 years of impactful service and reflects our commitment to thoughtful succession planning and continued maturity of our cybersecurity program.  The incoming leader will benefit from a structured transition, partnering with the incumbent for three to six months to ensure continuity, knowledge transfer, and a strong foundation for future success.

Responsibilities

• Own and lead enterprise-wide cybersecurity strategy, governance, and program execution.

• Setting the strategic cybersecurity direction for the company.

• Establishing, sustaining, and monitoring compliance with company cybersecurity policy and procedures.

• Ensuring the quality and effectiveness of cybersecurity safeguards, including conduct of internal and independent assessments that evaluate the cybersecurity capabilities of the company.

• Accountable for enterprise cyber risk management, including defining risk appetite, maintaining risk registers, and establishing governance structures that support informed decision-making and accountability.

• Assessing day-to-day incidents to determine actual or potential business impact and mobilizing incident response resources as appropriate.

• Monitoring the security postures of company IT and business supply chains.

• Performing quantitative and qualitative cybersecurity risk analysis.

• Vetting IT vendors and embedding security requirements into new applications, technologies, and business initiatives.

• Overseeing security architecture across cloud, on-premises, and hybrid environments.

• Understanding and developing security designs for IT and, where applicable, OT/ICS environments.

• Leveraging value from external relationships with cybersecurity experts.

• Providing board-level reporting on cybersecurity posture, material risks, risk trends, and program maturity metrics.

• Drafting presentations for review by executive management and delivering them to the board of directors and/or audit committee.

• Ensuring independent escalation of cybersecurity risks when necessary.

• Driving a culture of security awareness and shared accountability across the organization.

Qualifications

• Must reside around the Houston metro area due to regular on-site attendance requirement; relocation assistance is not provided.

• CISSP (Certified Information Systems Security Professional) - is preferred

• CISM (Certified Information Security Manager) or CISA (Certified Information Systems Auditor) - preferred

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field required

• Master's degree in Cybersecurity, Information Assurance, Business Administration, or related discipline preferred

• Proficiency with SIEM platforms (e.g., Sentinel) and SOAR tools for automated incident response

• Proficiency with cloud security platforms (e.g. Azure Defender)

• Proficiency with endpoint protection and EDR solutions (e.g., Defender, CrowdStrike, SentinelOne, Carbon Black)

• Knowledge of secure software development practices

• Familiarity with legal implications of cybersecurity, including breach-notification laws, data residency, and contractual risk

• Experience conducting third-party risk assessments, including vendor due diligence and contract negotiation for security SLAs

• Awareness of emerging technologies, including AI as a business and cybersecurity risk issue, cloud-native security, and zero-trust architectures

• Experience with OT/ICS environments, IoT security, or other specialized environments, where relevant to the industry

• Extensive expertise in cybersecurity domains, including network security, cloud infrastructure protection, application security, and data privacy. Candidate should demonstrate experience leading the design and implementation of layered security architectures across hybrid environments, with measurable outcomes in threat reduction.

• Thorough understanding of regulatory and compliance ma