Chief Information Security Officer

Company Description

Trupanion is a leading provider of medical insurance for cats and dogs in North America. Our mission is to help loving, responsible pet owners budget and care for their pets. Trupanion offers a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves. 

Job Description

We are seeking a highly experienced and visionary Chief Information Security Officer (CISO) to lead our organization's cybersecurity strategy and protect our digital assets, sensitive data, and information systems. The CISO will oversee the development, implementation, and management of comprehensive security programs and ensure compliance with regulatory requirements. This IT leadership role requires a strategic thinker, strong leadership skills, and technical expertise in cybersecurity practices. 

This position is open to candidates in the Seattle area. You will have a hybrid remote/in-office schedule, working from our casual, pet-friendly office at least three days a week. 

Key Responsibilities: 

Strategic Leadership 

• Collaborate with CIO to develop and execute a robust enterprise-wide cybersecurity strategy. 
• Align security initiatives with business objectives, ensuring risk mitigation without hindering innovation or operations. 
• Provide expert guidance to the IT leadership team on current and emerging cybersecurity threats and best practices. 

Risk Management 

• Identify, evaluate, and mitigate cybersecurity risks through proactive measures and incident response planning. 
• Oversee periodic risk assessments, audits, and penetration tests to maintain a strong security posture. 
• Implement and maintain cybersecurity frameworks, such as NIST, ISO 27001, or similar. 

Operational Oversight 

• Lead the design, deployment, and management of security architecture, policies, and procedures. 
• Monitor and respond to security breaches, cyber incidents, and vulnerabilities. 
• Establish and oversee the Security Operations Center (SOC) and incident response teams. 
• Compliance and Governance 
• Ensure compliance with applicable laws, regulations, and industry standards (e.g., GDPR, NYDFS, PCI DSS, OSHI, SOX). 
• Develop and enforce security policies, standards, and guidelines across the organization. 
• Work closely with legal, compliance, and 3rd party audit teams to address regulatory requirements. 
• Collaboration and Communication 
• Build and maintain relationships with internal stakeholders, including IT, HR, and legal departments. 
• Engage with external partners, such as vendors, insurance agencies, government agencies, and industry groups, to enhance the organization's security framework. 
• Deliver clear and actionable reports on cybersecurity performance and risks to the board of directors and executive management. 

Team Leadership 

• Build appropriate org structure and recruit, mentor, and manage a high-performing cybersecurity team. 
• Foster a culture of security awareness and continuous improvement throughout the organization. 

Qualifications & Experience: 

Education and Experience 

• Bachelor’s or Master’s Degree in Computer Science, Information Security, or a related field. 
• 10+ years of progressive experience in cybersecurity, including leadership. 
• Certifications such as CISSP, CISM, CISA, or equivalent are preferred. 

Technical Expertise 

• In-depth knowledge of cybersecurity technologies, tools, and trends. 
• Experience with cloud security, endpoint protection, threat intelligence, and security analytics. 
• Proficiency in developing and managing security budgets and resource allocation. 

Leadership and Communication 

• Proven ability to lead cross-functional teams and drive strategic initiatives. 
• Excellent communication and presentation skills, with the ability to convey complex security concepts to non-technical audiences. 
• Strong decision-making, problem-solving, and crisis-management skills. 

Core Competencies & Skills: 

Strategic Thinking and Vision 

• Ability to develop and execute a long-term cybersecurity strategy aligned with business goals. 
• Awareness of emerging trends, threats, and technologies to future-proof the organization. 

Risk Management Expertise 

• Proficient in identifying, assessing, and mitigating risks across the enterprise. 
• Skilled in implementing risk management frameworks (e.g., NIST, ISO 27001). 
• Strong understanding of business impact ana