VP, Chief Information Security Officer | Remote, USA

This position will be fully remote and can be hired anywhere in the continental U.S. 

Optiv’s VP, Chief Information Security Officer (CISO) leads the enterprise security, risk, and compliance (ESRC) team and is responsible for defining and executing the cybersecurity strategy for the corporation to manage risk, protect client data, and company resources. The CISO will drive the development of technology roadmaps and processes; ensure compliance with company policy, customer contracts, regulatory requirements, and industry best practices. The CISO will report directly to the General Counsel. The CISO will evangelize the importance of Cyber Security; speaking on the latest cyber security threats and how Optiv is mitigating those threats. The CISO will work with business and IT leaders to provide and maintain solutions which meet business and technical requirements by applying new and existing security technologies and solutions to solve business needs. 

How you’ll make an impact

• Drive the development of security strategies and implementation roadmaps centered around a zero-trust philosophy and industry best practices.

• Develop and manage key security solutions in the GRC, SOC, Detection and Response, and IAM space.

• The CISO and their org will work closely with IT and the business to manage and operate all security technology.

• Ensure compliance with various industry and government regulations and standards.

• Ensure compliance with company policies and procedures.

• Coordinate and execute the development of a SOC-2 report and other elements of corporate due diligence such as PCI compliance and responding to client questionnaires.

• Coordinate and execute incident response events and support internal investigations.

• Oversee third party risk management of strategic vendors and partners.

• Engage with clients to advise on the latest cyber security threats and share best practices.

• Influence and direct security vendors to resolve issues and enhance product roadmaps to meet the needs of the company.

• Research and evaluate impact of new vulnerabilities, security alerts, threat intelligence and related standards and regulations.

• Stay informed of new security technologies and solutions to assist in the on-going development of the overall security strategy.

• Build key relationships and partner with other leaders in the business and IT, enterprise security, services, and sales teams in designing next generation customer and employee solutions.

• Look for opportunities to leverage Optiv Services and solutions to meet cybersecurity needs.

• Assist marketing with thought leadership to promote Optiv brand.

• Share best practices with strategic clients and partners to strengthen relationships.

• Share experience, knowledge, and ideas with management and co-workers to maintain a kind and respectful team-based environment.

• Lead a team utilizing experience in progressive managerial/supervisory positions including effective use of employee performance plans and evaluations, coaching, and mentoring techniques, and addressing employee conflicts and disciplinary actions required.

• Create a risk-based process for the assessment and mitigation of any information security risk in the ecosystem consisting of supply chain partners, vendors, consumers and any other third parties.

• Coordinate the development of implementation of incident response plans and procedures to ensure that business-critical services are recovered in the event of a security event; provide direction, support, and in-house consulting in these areas.

• On a continuous basis, evaluate overall IT security direction of Optiv, ensuring that all activities are secure, effective, and efficient.

• Manage the ESRC team and the cybersecurity portfolio.

• Manage the cybersecurity budget.

• Establish metrics to articulate the security posture and risk profile to executive management and the board.

• Serve as a member of the Optiv Operating Leadership Group.

• Be a talent management ambassador.

• Embrace a culture of diversity, equity and inclusion and support company core values.

• Promote a corporate culture that is committed to information security best practices.

• Balance strong security controls and practices with usability features and business needs.

• Participate in after-hours support as needed to respond to security incidents.

• Function with a high degree of integrity with an ability to keep information confidential.

• Up to 50% travel.