chief information security officer

Public Company Accounting Oversight Board (PCAOB)

<div>
 <strong>
  Join us and make a difference in global investor protection.
  <br/>
  <br/>
 </strong>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 The Public Company Accounting Oversight Board (PCAOB), a nonprofit organization established by Congress, oversees the audits of public companies and SEC-registered brokers and dealers to protect investors and to further the public interest in the preparation of independent, accurate, and informative audit reports.
 <br/>
 <br/>
 Our investor protection mission is focused on modernizing audit standards, enhancing audit inspections, and strengthening enforcement of PCAOB rules and standards and other related laws and rules. People are at the heart of our mission at the PCAOB. As we carry out that mission, we strive to uphold the highest standards in audit quality with investors&rsquo; families, savings, and futures in mind.
 <br/>
 <br/>
 We are hiring mission-driven professionals interested in a career with purpose, competitive benefit offerings, and work-life flexibility. If you are interested in working with a group of talented professionals to protect investors and drive audit quality and innovation while adhering to the highest standards of ethical and professional conduct, join us.
 <br/>
 <br/>
 <strong>
  What We Offer
  <br/>
  <br/>
 </strong>
 At the PCAOB, we offer a highly competitive compensation and benefits package with a focus on the health and financial well-being of our valued team members. Some of the features of our comprehensive Total Rewards package include:
 <br/>
 <br/>
 <ul>
  <li>
   Compensation &ndash; We support transparency, equity, and fairness in our compensation programs and provide a reasonable estimate of the salary range, based on data-driven market analysis, for each job posting. While it is not typical for an individual to be hired at or near the top of the range, a reasonable estimate of the salary range for this role in Washington, DC (Headquarters) or New York, NY is $248,100/year - $400,000/year. Team members may also be eligible for performance-based discretionary awards.
  </li>
  <li>
   Hybrid work option &ndash; Staff will be assigned to the Washington, DC (Headquarters) or New York, NY office.
  </li>
  <li>
   Generous paid time off &ndash; Up to 6 weeks annually, in addition to 12 federal holidays, and 2 floating holidays and a year-end break December 28 &ndash; 31, 2026.
  </li>
  <li>
   Highly competitive 401(k) match and savings options &ndash; Immediate vesting and contributions matched dollar for dollar, up to 7 percent of eligible compensation. Roth in-plan conversion available.
  </li>
  <li>
   Comprehensive and competitive health benefit offerings &ndash; Medical, dental, and vision plans
  </li>
  <li>
   Supportive paid family leave benefits &ndash; Up to 16 weeks paid parental leave and up to 16 weeks paid caregiver leave
  </li>
  <li>
   Life insurance benefits &ndash; Basic life and AD&amp;D insurance provided; supplemental insurance also available
  </li>
  <li>
   Education benefits &ndash; PCAOB staff qualify for the Public Service Loan Forgiveness (PSLF) program. We also offer student loan repayment assistance, staff college tuition assistance, and college coach program support.
  </li>
  <li>
   Well-being and family resources &ndash; Mental health and well-being resources, paid volunteer time, emergency child/adult dependent back-up care services, family-forming assistance, discounted gym memberships, employee assistance program (EAP), health advocate program, and more
  </li>
  <li>
   Commuter benefits &ndash; Tax-free employer subsidy and pretax employee deductions
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Position Summary
  <br/>
  <br/>
 </strong>
 The PCAOB has a full-time position for a Chief Information Security Officer (CISO) in the Office of Technology (OT). This role will be located at our Washington, DC (Headquarters) or New York, NY office and will report to the Chief Information Officer (CIO). The CISO will participate and contribute as an effective member of the PCAOB leadership team, working closely with and advising the CIO, PCAOB executive leadership, and Board on all matters related to the information security program and cybersecurity operations of the PCAOB. Additionally, he/she will be responsible for the implementation, optimization, and delivery of our comprehensive information security strategy aligning our data and technology standards to the security posture of the PCAOB. The CISO, in collaboration with business leaders, will guide and assist with the development and implementation of a security program, facilitate information security governance, advise the CIO on security direction and resource investments, and design and align appropriate policies with respect to information security. This role will continuously assess and develop the cybersecurity landscape, act as a change agent, and help to lead information security resilience across OT and the PCAOB, protecting all data and technology assets. This role will collaborate and interact with the Chief Risk Officer (CRO) and the Office of Enterprise Risk Management (OERM) on information security risk related topics.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Responsible for the strategic leadership, implementation, monitoring, reporting, and continuous improvement of the PCAOB's information security program.
  </li>
  <li>
   Work with PCAOB leadership, divisions, and offices to oversee and mature the operations of a PCAOB-wide information security organization with a common goal in information security and cybersecurity risk.
  </li>
  <li>
   Provide leadership and foster collaboration with risk, compliance, and legal teams and business stakeholders to ensure a secure approach to innovation and the application of artificial intelligence (A.I.).
  </li>
  <li>
   Provide leadership and promote automation for configuration and deployment in support of Security Operations (SecOps); manage institution-wide information security processes by leading OT information security staff to maintain an effective information security program and implement associated priorities.
  </li>
  <li>
   Lead efforts to continually assess, evaluate, and make recommendations to management regarding the adequacy of the IT general and security controls for the PCAOB and technology systems which requires a proactive, hands-on approach.
  </li>
  <li>
   Develop, implement, and administer technical cybersecurity standards, as well as the suite of security services and tools, and align to existing PCAOB policies, frameworks, and procedures.
  </li>
  <li>
   Design and implement a tactical structure to address Security Operations Center (SOC) structures to better enable outage notifications, security risks/threats, or elevation of incidents that occur within the PCAOB environment.
  </li>
  <li>
   Establish annual and long-range cybersecurity and compliance goals, align with data and technology strategies, create and monitor Key Performance Indicators (KPI), and forge a multi-year information security roadmap.
  </li>
  <li>
   Proactively identify, assess, and prioritize IT risks to data and systems in coordination with OT portfolio management and OERM including internal/external threats, cyber-crimes, and vendor/third-party risks; partner with OERM or relevant stakeholders on the appropriate courses of action to mitigate or eliminate risk.
  </li>
  <li>
   Lead a technical team to proactively work with business units across the PCAOB to implement practices and ensure implementation of technological controls that meet agreed-on policies and standards for information security.
  </li>
  <li>
   Lead the development and implementation of effective frameworks, relevant policies, processes, and practices to secure protected and sensitive data in accordance with the PCAOB&rsquo;s Information Sensitivity Classification ensuring compliance with relevant legislation and legal interpretation.
  </li>
  <li>
   Collaborate and coordinate with the CRO to identify, evaluate, and report on OERM organizational-level risk reports to the Board in areas such as legal and regulatory, IT, and cybersecurity risk, while supporting and advancing business objectives.
  </li>
  <li>
   Provide leadership supporting a team to streamline and maintain a modern compliance model for cybersecurity safeguards, including access controls, MFA, encryption, asset classification, change management, patch management, network segmentation, firewalls, detection technologies including network and endpoint security, insider threat protection, logging and network monitoring, and vulnerability management.
  </li>
  <li>
   Conduct and support regular internal and external security assessments, tabletop exercises, penetration tests, playbook development, and red/purple team exercises to proactively test the effectiveness of security controls including OT Security Program Assessments and corrective action plans.
  </li>
  <li>
   Keep abreast of security incidents and act as primary control point during significant information security incidents; convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidences that arise. This may require availability off hours, as applicable.
  </li>
  <li>
   Mature education and awareness programs and advise PCAOB leadership at all levels on security issues, best practices, and vulnerabilities.
  </li>
  <li>
   Examine impacts of new technologies on the PCAOB's overall information security; establish processes to review implementation of new technologies to ensure security compliance.
  </li>
  <li>
   Perform the full range of supervisory duties, including resource allocation plans, evaluating employee performance; making recommendations for appointment and promotion; hearing and resolving complaints; identifying development and training needs of employees; other related supervisory tasks.
  </li>
  <li>
   Other duties as assigned.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 Education/Technical Expertise
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor&rsquo;s degree or equivalent experience in information technology, engineering, computer science, cybersecurity, or related field.
  </li>
  <li>
   Minimum of 15+ years experience in cybersecurity with 5+ years in progressive leadership roles.
  </li>
  <li>
   Minimum of 7+ years experience directly supporting reference architectures around Microsoft Technology environments.
  </li>
  <li>
   Minimum of 5+ years Agile experience managing Scrum/Kanban teams and Agile methodologies/ceremonies.
  </li>
  <li>
   Minimum of 5+ years experience with cloud computing/elastic computing across virtualized environments.
  </li>
  <li>
   Working knowledge of Data Loss Prevention (DLP) programs and best practices, including expertise in securing large, unstructured, and rapidly evolving data sets.
  </li>
  <li>
   Hands-on experience implementing NIST, ISO, SOX, PCI, or other frameworks.
  </li>
  <li>
   Working knowledge of security architectures and compliance best practices with Microsoft Azure, Cloud Access Security Brokers (CASB), and Zero-trust environments.
  </li>
  <li>
   Experience with contract and vendor negotiations and management including managed services.
  </li>
  <li>
   Experience in planning, organizing, and developing IT security system technologies.
  </li>
  <li>
   Ability to explain information security, cyber security, and data privacy issues and programs to non-technical and non-expert audiences.
  </li>
  <li>
   Proven ability to develop, coach, and mentor staff, providing constant feedback and clear direction.
  </li>
  <li>
   Proven record of strategic planning, functional transformation experience, and conflict management.
  </li>
  <li>
   A self-starter able to administer several open, ongoing assignments at any one time, where some assignments are routinely unstructured, requiring autonomy and independent judgment.
  </li>
  <li>
   In-depth experience successfully harmonizing diverse and competing interests.
  </li>
  <li>
   Ability to clearly articulate a position with sound logic, supporting empirical evidence, and impartiality.
  </li>
  <li>
   Ability to effectively represent the organization to a variety of both internal and external constituencies, deconstruct complex challenges, and translate business needs into technology solutions.
  </li>
  <li>
   Occasional travel to the PCAOB&rsquo;s regional offices.
  </li>
  <li>
   Superior verbal and written communication skills.
  </li>
  <li>
   Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CISM, CISSP, CRISC or other relevant certification.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Leadership/Management Skills And Abilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ability to work in matrixed environments
  </li>
  <li>
   Ability to work in Agile operating frameworks
  </li>
  <li>
   Ability to flourish in environments of change to advance continuous improvement
  </li>
  <li>
   Ability to drive a positive &ldquo;tone at the top&rdquo; of the organization and hold others accountable for doing the same.
  </li>
  <li>
   Ensures that own behavior and the behavior of others is consistent with the highest ethical standards and aligns with the values of the organization.
  </li>
  <li>
   Must be able to motivate and inspire employees at all levels of the organization in order to enhance team commitment and individual performance.
  </li>
  <li>
   Proven ability to develop, coach, and mentor staff, providing constant feedback and clear direction.
  </li>
  <li>
   Ability to promote collaboration by unifying teams, setting common goals and incentivizing collaborative behavior.
  </li>
  <li>
   Demonstrated success in establishing and maintaining positive working relationships with others, both internally and externally, to achieve the goals of the organization.
  </li>
  <li>
   Strong ability to build credibility, organize effectively, solve problems quickly and communicate clearly.
  </li>
  <li>
   Possesses the balance and emotional intelligence required to meet the diverse needs of the divisions/offices.
  </li>
  <li>
   Proven ability to navigate and resolve various types of conflict in a timely and productive manner.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Equal Employment Opportunity
  <br/>
  <br/>
 </strong>
 All PCAOB employees are entitled to equal opportunity and a professional work environment, free of discrimination and harassment. A workplace free of discrimination and harassment is fundamental to professional success and to the PCAOB's mission. The PCAOB will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law.
</div>


Chief Information Security Officer

DriveWealth

<div>
 <strong>
  About Us
 </strong>
 <p>
  DriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of US equities, mutual funds, ETFs, fixed income, and options.
 </p>
 <p>
  There&rsquo;s never been a better time to build a category-defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional-grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!
 </p>
 <p>
  <strong>
   About the Role
  </strong>
 </p>
 <p>
  As Chief Information Security Officer, you will be responsible for leading and strengthening the company&rsquo;s entire security function across four key domains: Governance, Risk &amp; Compliance (GRC), Offensive Security (Red Team), Defensive Security (Blue Team), and Security Engineering &amp; Architecture. You will take charge of strategy, improve processes, manage budgets, and build out teams to support ambitious growth goals. The CISO will also represent security to senior leadership and the board, ensuring the organization is compliant with industry standards and ready for regulatory scrutiny.
 </p>
 <p>
  <strong>
   What You&rsquo;ll Do
  </strong>
 </p>
 <ul>
  <li>
   Oversee and enhance policy frameworks and regulatory compliance programs (e.g., SOC, ISO27001, GDPR)
  </li>
  <li>
   Conduct and improve security monitoring, incident response, and threat hunting functions
  </li>
  <li>
   Direct penetration testing and vendor management activities
  </li>
  <li>
   Lead the engineering of secure network and identity management systems in the cloud
  </li>
  <li>
   Build, mentor, and expand a skilled security team across underdeveloped areas (especially GRC and Blue Team)
  </li>
  <li>
   Engage with industry forums, prepare audit and compliance reports, and present to company leadership
  </li>
  <li>
   Drive readiness for public company listing and support ongoing business growth
  </li>
 </ul>
 <p>
  <strong>
   What You&rsquo;ll Need
  </strong>
 </p>
 <ul>
  <li>
   Strong experience in regulated industries (preferably fintech; healthcare also considered)
  </li>
  <li>
   Deep knowledge of cloud-first and zero-trust security models
  </li>
  <li>
   Proven track record in building full-scale security programs for public or pre-IPO companies
  </li>
  <li>
   Hands-on leadership with the ability to develop and expand high-performing teams
  </li>
  <li>
   Expertise in standards compliance, including SOC, ISO27001, and GDPR
  </li>
  <li>
   Experience presenting security strategy to executive and board-level leadership
  </li>
  <li>
   Familiarity with security certifications and regulatory forums (e.g., FINRA, ISAC)
  </li>
  <li>
   Ability to manage budgets and vendor relationships in a dynamic environment
  </li>
 </ul>
 <p>
  CompensationCompensation package offerings are based on candidate experience and technical qualifications, as it relates to the role. These are identified and determined throughout your interviewing experience.Please note: this role is expected to come into our office on a cadence set by the Hiring Manager/Team.
 </p>
 <p>
  New York, NY (Hybrid) Pay Range: $300,000 USD - $400,000 USD
 </p>
 <strong>
  Working at DriveWealth
 </strong>
 <p>
  We do our best work when we&rsquo;re in the same room. To maintain the speed our partners expect, our New York and Chicago teams work in-office 4 days a week. We&rsquo;ve found that being physically side-by-side is the only way to solve complex problems in real-time and stay truly accountable to the products we ship. When you&rsquo;re here, you&rsquo;re working directly with the people making the decisions.&nbsp;To support that work, we provide competitive compensation, equity, and a 401(k) match. We also offer full insurance coverage, a wellness reimbursement, a company-provided phone, and a personal development allowance. Finally, we value the time you spend away from the office with generous PTO, observed holidays, and extended leave.
 </p>
 Work Authorization
 <p>
  Applicants must possess the legal right to work in the country where the position is located at the time of application. DriveWealth requires all employees to provide original documentation verifying their work authorization on or before their first day of employment.
 </p>
 <p>
  For US-based roles: Applicants must be currently authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship. DriveWealth does not provide visa sponsorship or support for employment authorization, including transfers, at this time. Offers of employment are strictly contingent upon an individual&rsquo;s ability to secure and maintain the legal right to work at the Company.
 </p>
 <strong>
  How We Think About AI
 </strong>
 <p>
  We leverage AI to work smarter and move faster. We seek AI-curious talent who are proactive about using emerging tools to increase signal quality, reduce friction, and improve outcomes to deliver products faster, provide better service to our partners, and to streamline processes. Your ability to leverage our internal tools and technology to drive results is as important to us as your core domain expertise.
 </p>
 <strong>
  Compensation
 </strong>
 <p>
  Pay is generally based on the level, complexity, responsibility, location, and job duties/requirements of the specific position. We then source candidates with the requisite skills, expertise, education, training, and experience.&nbsp; If you are selected for an interview, please feel welcome to speak to a recruiter about our compensation philosophy and other available benefits. This role is eligible for base, bonus, equity, 401(k) match, and heavily subsidized benefits and perks.
 </p>
 <strong>
  Equal Employment Opportunity
 </strong>
 <p>
  To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply.&nbsp;
 </p>
 <strong>
  Agency Disclaimer
 </strong>
 <p>
  DriveWealth does not accept agency resumes. Do not forward resumes to our jobs alias, employees, or any other organization location. DriveWealth is not responsible for any fees related to unsolicited resumes.
 </p>
</div>


Loyola University Chicago

<div><h2 class="jobSectionHeader"><b>Position Details</b></h2>
<div><div><div>Position Details
</div><p></p><div><div><div><div><b>Job Title</b></div> <div>Director &amp; Chief Information Security Officer</div>
</div><br>
<div><div><b>Position Number</b></div> <div>8100528</div>
</div><br>
<div><div><b>Work Modality</b></div> <div>Hybrid &ndash; 4 In-Person</div>
</div><br>
<div><div><b>Is this request for the creation of a new Position (or the modification of an existing Position) to temporarily support the WorkDay ERP?</b></div> <div>No</div>
</div><br>
<div><div><b>Job Category</b></div> <div>University Staff</div>
</div><br>
<div><div><b>Job Type</b></div> <div>Full-Time</div>
</div><br>
<div><div><b>FLSA Status</b></div> <div>Exempt</div>
</div><br>
<div><div><b>Campus</b></div> <div>Rogers Park-Lake Shore Campus</div>
</div><br>
<div><div><b>Department Name</b></div> <div>TECHNOLOGY SERVICES</div>
</div><br>
<div><div><b>Location Code</b></div> <div>Information Security and Compliance</div>
</div><br>
<div><div><b>Is this split and/or fully grant funded? </b></div><div>No</div>
</div><br>
<div><div><b>Duties and Responsibilities</b></div>
<div><div>Position Overview:<br>
<br>
The Director &amp; Chief Information Security Officer (CISO) will be responsible for overseeing the development, implementation, and use of information security and cybersecurity resources and practices throughout the organization. This position will play a crucial role in guiding the university&rsquo;s strategic IT initiatives to enhance productivity, efficiency, and security.<br>
<br>
General Responsibilities:<br>
</div><ul><li>Strategic Oversight: Develop and implement an IT strategy that aligns with the organization&rsquo;s business goals and objectives, ensuring the efficient and secure operation of all IT systems and processes.</li>
<li>Leadership and Management: Lead and manage the IT department and/or unit, including hiring, training, and developing IT staff. Foster a culture of innovation, collaboration, and continuous improvement.</li>
<li>Innovation and Emerging Technologies: Stay current with industry trends and emerging technologies, evaluating their potential impact on the organization and recommending strategic investments.</li>
<li>Budgeting and Cost Control: Develop and manage the UISO&rsquo;s budget, ensuring cost-effective use of resources and adherence to financial goals.</li>
<li>Compliance and Risk Management: Ensure the organization&rsquo;s IT systems comply with relevant regulations and standards, managing risks associated with technology use.</li>
<li>Relationship Management: Establish and maintain relationships with IT vendors and service providers, negotiating contracts and ensuring the delivery of quality services.</li><br>
<p></p>
</ul><div>
<br>
Position Specific Responsibilities:<br>
</div><ul><li>Provide strategic and operational leadership of all functions for University Information Security Office (UISO).</li>
<li>Demonstrate a commitment to Loyola&rsquo;s mission and strategy by supporting the ITS core values of service excellence for university strategic initiatives and continuous development/improvement.</li>
<li>Develop and implement plans to ensure institutional compliance with applicable laws, regulations and requirements related to information security.</li>
<li>Create and manage the university&rsquo;s information security program and establish relevant security metrics.</li>
<li>Acts as an independent reviewer to ensure that technology compliance issues and concerns within Loyola University Chicago are being appropriately evaluated, investigated and resolved.</li>
<li>Coordinates the creation, testing and execution of business continuity and disaster recovery plans across the Loyola University Chicago departments and schools.</li>
<li>Regularly communicate in writing and in-person to end users and resource contributors about the state of information security, security expectations and on-going information risk status.</li>
<li>Identify staff development/training plans, as well as succession planning, for the UISO staff.</li>
<li>Participate in relevant professional activities, including involvement in university-wide and participation in external professional organizations.</li>
<li>Perform other duties as required.</li>
</ul></div>
</div><br>
<div><div><b>Minimum Education and/or Work Experience</b></div>
<div><br>
<ul><li>Master&rsquo;s degree in Management Information Systems, Computer Science or Engineering or equivalent experience. Relevant industry experience, aptitude, and the ability to learn while applying knowledge and skill-sets is important.</li><li>At least 10 years of experience in information security and/or network/security management.</li><li>At least 7 years of experience in managing information security, technology risk or compliance personnel.</li><li>Proven experience with technology risk assessment and regulatory compliance, such as FERPA, GLBA, HIPAA, PCI DSS, DMCA, GDPR, Illinois Personal Information Protection Act, and similar regulations.</li><li>Familiarity with security concepts such as defense-in-depth, the principle of least privilege, access controls, risk management, and mitigating controls required.</li><li>Demonstrated skills related to business continuity and disaster recover planning.</li><li>Experience in Higher Education is a plus, but not required.</li><li>Experience with IT frameworks such as NIST or the ISO 27000 series is a plus, but not required.</li></ul></div>
</div><br>
<div><div><b>Qualifications</b></div>
<div><b>Language Ability:</b><br>
<ul><li>Excellent communication (oral, written, presentation), interpersonal and consultative skills to work effectively with vendors, clients, peers, and ITS management and staff.</li><li>Core consulting skills such as business writing, presenting, and analytic comparisons.</li><li>Ability to communicate technical concepts and solutions to both technical and non-technical audiences.</li></ul><br>
<b>
Computation Ability:</b><br>
<ul><li>Strong analytical and problem solving skills.</li></ul><br>
<b>
Reasoning Ability:</b><br>
<ul><li>Must be detail oriented, results focused, and be able to support change management initiatives.</li><li>Synthesizes complex or diverse information; Generates creative solutions; Identifies and resolves problems in a timely manner; Gathers and analyzes information skillfully; Develops alternative solutions; Works well in both group and individual problem solving situations. Looks for ways to improve and promote quality; Responds promptly to customer needs; Solicits customer feedback to improve service; Responds to requests for service and assistance.</li></ul><br>
<b>
Interpersonal:</b><br>
<ul><li>Great attitude and strong work ethic; Ability to work independently and in team settings; Focuses on solving conflict, not blaming; Maintains confidentiality and follows ITS and other university policies regarding data security and protection; Balances team and individual responsibilities; Contributes to building a positive team spirit; Effectively influences actions and opinions of others; Strives to continuously build knowledge and skills; Shares expertise with others.</li><li>Collaborates information security concepts with both technical and non-technical individuals; Possesses the ability to explain and gain concurrence on information security concepts.</li><li>Diversity &ndash; Shows respect and sensitivity for cultural differences; educates others on the value of diversity.</li><li>Ethics &ndash; Treats people with respect; Works with integrity and ethically; handles sensitive and confidential issues and materials appropriately.</li></ul><br>
<b>
Organizational Skills:</b><br>
<ul><li>Supports organization&rsquo;s goals and values; Develops strategies to achieve organizational goals; Adapts strategy to changing conditions; Includes appropriate people in decision-making process; Strong administrative and organizational skills.</li></ul></div><br>
</div><br>
<div><div><b>Certificates/Credentials/Licenses</b></div>
<div>CISSP or CISM certification required<br>
<br>
GIAC certifications are a plus, but not required<br>
</div>
</div><br>
<div><div><b>Computer Skills</b></div>
<div>Demonstrated competence related to network and web application firewalls, intrusion prevention, security monitoring, multi-factor authentication, data loss prevention, data encryption/transfer, email and end-user security, log management and security incident and event management technologies.<br>
<br>
Proficient in Microsoft applications.</div>
</div><br>
<div><div><b>Supervisory Responsibilities</b></div> <div>Yes</div>
</div><br>
<div><div><b>Required operation of university owned vehicles</b></div> <div>No</div>
</div><br>
<div><div><b>Does this position require direct animal or patient contact? </b></div><div>No</div>
</div><br>
<div><div><b>Physical Demands</b></div> <div>None</div>
</div><br>
<div><div><b>Working Conditions</b></div> <div>Irregular Hours</div>
</div><br>
<div><div><b>Open Date</b></div> <div>04/15/2026</div>
</div><br>
<div><div><b>Close Date</b></div>
</div><br>
<div></div><div><div><b>Position Maximum Salary or Hourly Rate</b></div> <div>$180,000/ann</div>
</div><br>
<div><div><b>Position Minimum Salary or Hourly Rate</b></div> <div>$160,000/ann</div>
</div><br>
<div><div><b>Special Instructions to Applicants</b></div>
<div>As a Jesuit, Catholic institution of higher education, we seek candidates who will contribute to our strategic plan to deliver a Transformative Education in the Jesuit tradition. To learn more about Loyola University Chicago&rsquo;s mission, candidates should consult our website at <b>www.luc.edu/mission/</b>. For information about the university&rsquo;s focus on transformative education, they should consult our website at <b>www.luc.edu/transformativeed</b>.<br>
</div>
</div><br>
<div><div><b>About Loyola University Chicago</b></div>
<div>Founded in 1870, Loyola University Chicago is one of the nation&rsquo;s largest Jesuit, Catholic universities, recognized for its academic excellence, commitment to community engagement, and leadership in sustainability. A Carnegie R1 research institution, Loyola leverages its status as one of an elite group of universities with the highest level of research activity to advance knowledge that serves communities and creates global impact. With <b>15 schools, colleges, and institutes</b>&mdash;including Business, Law, Medicine, Nursing, and Health Sciences&mdash;Loyola operates three primary campuses in the greater Chicago area and one in Rome, Italy, that provide students a transformative, globally connected learning experience. Consistently ranked among the nation&rsquo;s top universities by U.S. News &amp; World Report, Loyola is a STARS Gold-rated institution that is ranked as one of the country&rsquo;s most sustainable campuses by The Princeton Review and has earned distinctions from AmeriCorps and the Carnegie Foundation for its longstanding record of service and community engagement. Guided by its Jesuit mission and commitment to caring for the whole person, Loyola educates ethical leaders who think critically, act with purpose, and strive to create a more just and sustainable world.<br>
<br>
Loyola University Chicago strives to be an employer of choice by offering its staff and faculty a wide array of affordable, comprehensive, and competitive benefits. To view our benefits in detail, <b>click here</b>.<br>
<br>
Loyola adheres to all applicable federal, state, and/or local civil rights laws and regulations prohibiting discrimination in private institutions of higher education. Please see the University&rsquo;s <b>Nondiscrimination Policy</b>.</div>
</div><br>
<div><div><b>Quick Link for Posting</b></div> <div>https://www.careers.luc.edu/postings/35033</div></div></div></div></div></div></div>

Director & Chief Information Security Officer

TotalShield Cybersecurity & Risk Solutions

<p><b>Job Title: Chief Information Security Officer (CISO)</b></p><p><b>About the Opportunity</b></p><p>TotalShield Cybersecurity &amp; Risk Solutions is seeking a visionary and experienced <b>Chief Information Security Officer (CISO)</b> to lead our cybersecurity strategy, risk governance, and enterprise security operations across Kuwait and the wider GCC region.</p><p>This is a high-impact executive role for a leader who thrives in building secure digital environments, managing enterprise risk, and guiding organizations through complex cyber threats.</p><p>If you are passionate about cybersecurity leadership, strategic risk management, and protecting critical infrastructure &mdash; this role offers strong career growth, regional influence, and executive-level responsibility.</p><p><b>What We Offer</b></p><ul><li>Competitive executive-level compensation package</li><li>Strategic leadership role with regional impact</li><li>Opportunity to build and lead a modern cybersecurity program</li><li>Exposure to enterprise, government, and critical infrastructure clients</li><li>Fast-growing environment with leadership autonomy</li></ul><p><b>Key Responsibilities</b></p><ul><li>Develop and execute enterprise-wide cybersecurity strategy and roadmap</li><li>Lead Security Operations Center (SOC), incident response, and threat intelligence functions</li><li>Establish governance, risk, and compliance (GRC) frameworks</li><li>Oversee cybersecurity architecture, cloud security, and infrastructure protection</li><li>Manage enterprise risk assessments and regulatory compliance (local and international standards)</li><li>Lead incident response planning and breach management</li><li>Advise executive leadership on cyber risk posture and mitigation strategies</li><li>Build and mentor high-performing cybersecurity teams</li><li>Coordinate with external auditors, regulators, and strategic partners</li><li>Ensure continuous improvement of security posture across all systems</li></ul><p><b>Candidate Profile</b></p><ul><li>Proven experience in senior cybersecurity leadership roles (CISO, Head of Security, Director-level)</li><li>Strong background in cybersecurity frameworks (ISO 27001, NIST, etc.)</li><li>Experience in SOC operations, risk management, and enterprise security architecture</li><li>Strong leadership, communication, and stakeholder management skills</li><li>Experience in government, enterprise, or regulated industries is highly preferred</li><li>Ability to operate in fast-paced, high-security environments</li></ul><p><b>Why Join Us</b></p><p>At TotalShield, you will shape the cybersecurity direction of a growing regional organization. This role offers executive influence, high visibility, and the opportunity to build security programs from the ground up while working with advanced technologies and enterprise clients.</p><p><b>Call to Action</b></p><p>If you are ready to take on a strategic leadership role in cybersecurity and make a regional impact, we encourage you to apply today. Join us in building secure digital futures across Kuwait and the GCC.</p><p>Job Type: Full-time</p><p>Pay: KD4,000.000 - KD7,000.000 per month</p><p>Work Location: In person</p>

Chief Information Security Officer (CISO)

Massachusetts Institute of Technology

<div>
 Posting Description
 <br/>
 <br/>
 <strong>
  CHIEF INFORMATION SECURITY OFFICER (CISO)
 </strong>
 , Information Systems and Technology (IS&amp;T) , establishes and leads the enterprise-wide information security strategy across MIT. The CISO leads other overall direction and implementation of the information security policies, programs, and procedures to protect information security assets. The CISO positions the information security teams to provide an efficient, effective, and up-to-date risk management environment in support of IS&amp;T&rsquo;s goals. The position is responsible for developing, maintaining, and enforcing enterprise IT security architecture, security standards, and guidelines encompassing information security.
 <br/>
 <br/>
 <strong>
  The Full Job Description Is Available Here .
  <br/>
  <br/>
 </strong>
 Job Requirements
 <br/>
 <br/>
 REQUIRED : Bachelor&rsquo;s degree; a minimum of fifteen years of experience in cybersecurity, information security, information technology or another related field; a minimum of five years of experience in a senior leadership role; a minimum of ten years of experience managing teams; demonstrated experience designing and managing enterprise-wide security programs, policies, and risk mitigation and initiatives; demonstrated expertise in compliance, data privacy laws, risk management, incident response, and security frameworks; and demonstrated experience with security architecture and enterprise technology. PREFERRED : Master&rsquo;s degree; experience in a higher education environment.
 <br/>
 <br/>
 This is a full-time hybrid position.
 <br/>
 <br/>
 4/27/2026
</div>


EMIRAGE Crafts Inc.

<p><b>Chief Information Security Officer (CISO) &mdash; Job Description</b></p><p><b>Summary</b><br/>Lead the organization&rsquo;s information security and risk‑management strategy to protect data, systems, and operations while enabling business objectives.</p><p><b>Key responsibilities</b></p><ul><li>Develop and execute a comprehensive information security strategy aligned with business goals and risk appetite.</li><li>Own governance, risk, and compliance (GRC): establish security policies, standards, and controls; oversee risk assessments and remediation plans.</li><li>Lead security operations: threat detection, monitoring, incident response, forensics, and vulnerability management.</li><li>Build and manage a security program covering application, cloud, infrastructure, identity, endpoint, and data protection.</li><li>Oversee identity and access management, privileged access controls, MFA, and least‑privilege enforcement.</li><li>Manage security architecture and tooling (SIEM, EDR, DLP, WAF, CASB, IAM, vulnerability scanners) and ensure secure design of systems and integrations.</li><li>Coordinate security for cloud platforms (AWS/Azure/GCP), SaaS, and on‑prem environments including IaC security and cloud posture management.</li><li>Lead third‑party/vendor security assessments, contractual security controls, and supply‑chain risk management.</li><li>Drive secure development practices: threat modeling, SAST/DAST, code review, dependency scanning, and DevSecOps integration.</li><li>Oversee data protection, encryption, key management, and privacy‑by‑design practices in collaboration with legal/privacy teams.</li><li>Manage incident response plan, runbooks, tabletop exercises, and post‑incident reviews; report major incidents to executives and board.</li><li>Maintain compliance with relevant standards and regulations (ISO 27001, SOC 2, PCI‑DSS, HIPAA, GDPR) and lead audits and attestations.</li><li>Develop security awareness and training programs for all employees; foster a risk‑aware culture.</li><li>Recruit, mentor, and develop security team members and coordinate cross‑functional security initiatives.</li><li>Report security metrics and risk posture to the executive team and board; advise on security implications of strategic initiatives.</li></ul><p><b>Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field; advanced degree preferred.</li><li>10+ years of progressive security experience with several years in senior leadership/management roles.</li><li>Deep technical knowledge across cloud security, network/security architecture, identity, application security, and incident response.</li><li>Proven experience with security frameworks and compliance regimes (ISO 27001, SOC 2, NIST, PCI, HIPAA, GDPR).</li><li>Strong business acumen and ability to translate technical risk into business impact for executives and board members.</li><li>Excellent communication, stakeholder management, and crisis‑management skills.</li></ul><p><b>Preferred skills</b></p><ul><li>Certifications such as CISSP, CISM, CCSP, or similar.</li><li>Experience securing cloud‑native architectures, DevSecOps practices, and modern SaaS environments.</li><li>Background in conducting security due diligence for M&amp;A and managing security as part of product development.</li><li>Familiarity with privacy regulations and working with legal/compliance teams.</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: QAR314.16 - QAR1,223.34 per hour</p><p>Work Location: On the road</p>

State of South Carolina

<div>
 <strong>
  Job Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Our mission is to support teachers, empower parents, and serve students so all graduates are prepared for success.
  <br/>
  <br/>
 </strong>
 <strong>
  Job Purpose
  <br/>
  <br/>
 </strong>
 The South Carolina Department of Education (SCDE) is seeking a highly experienced and strategically minded Chief Information Security Officer (CISO) to lead the agency&rsquo;s enterprise information security program. Reporting to executive leadership and coordinating with the SC Division of Information Security (DIS), the CISO establishes and maintains the vision, strategy, and program to ensure information assets and technologies are adequately protected. This senior-level role is critical for ensuring the security, integrity, and privacy of information systems across the agency, advising executive management on data governance, and implementing robust security strategies that align with both federal and state regulations, including Family Educational Rights and Privacy Act (FERPA), National Institute of Standards and Technology (NIST) frameworks, and SC DIS requirements.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develop and execute a comprehensive, long-term information security strategy and road map aligned with agency goals and the SC state government security strategy; design and maintain the agency&rsquo;s enterprise security plan, security architecture, policies, standards, and procedures, including recommendations for enhancements and risk mitigation strategies.
  </li>
  <li>
   Oversee and direct the Agency&rsquo;s business continuity and disaster recovery planning and cyber incident response processes, ensuring full recovery capabilities within established timeframes.
  </li>
  <li>
   Manage continuous monitoring of the Agency&rsquo;s security infrastructure, including threat models, vulnerability assessments, compliance reviews, infrastructure scans, SIEM operations, and audit/transaction log reviews. Lead incident detection, response, containment, eradication, recovery, and post-incident activities; coordinate responses to internal and external security threats.
  </li>
  <li>
   Conduct regular assessments and audits of systems, including application, network, and data flow reviews, to ensure compliance with security policies, laws, best practices, and contractual obligations (third-party compliance, MOUs, and NDAs for contractors), including FERPA, NIST SP 800-53, CJIS, IRS Publication 1075, PCI DSS, and SC DIS requirements.
  </li>
  <li>
   Lead vendor risk management; establish security requirements for vendor and partner relationships including contracts, MOUs, and statements of work. Oversee third-party security assessments, audits, and evaluations to ensure vendors meet agency security standards.
  </li>
  <li>
   Serve as the agency&rsquo;s primary liaison with the SC Division of Information Security (DIS), participating in regular coordination meetings and ensuring alignment with statewide cybersecurity standards, directives, and enterprise security strategy.
  </li>
  <li>
   Foster a security-aware culture through ongoing security awareness training, phishing assessments, and communication strategies. Work with school districts to enhance information security awareness and promote best practices in remediation and vulnerability management.
  </li>
  <li>
   Control access to agency systems and data through administrative, physical, and technical controls including identity and access management (IAM) and privileged access management (PAM). Proactively evaluate best-in-class and emerging technologies&mdash;including Zero Trust architecture, cloud security, and AI-enabled threat detection&mdash;that may improve security posture and support Agency mission.
  </li>
  <li>
   Work with and mentor information security staff, fostering a high-performing team to develop and implement Agency goals. Communicate security risk, program status, and effectiveness clearly to executive leadership and the agency head.
   <br/>
   <br/>
  </li>
 </ul>
 This position is located in the Office of Information Technology.
 <br/>
 <br/>
 <strong>
  Minimum And Additional Requirements
  <br/>
  <br/>
 </strong>
 A bachelor's degree in information technology systems, computer science, or related field and experience in the information technology field to include experience in a security-focused role. Relevant experience may be substituted for the bachelor's degree on a year-for-year basis.
 <br/>
 <br/>
 <strong>
  Preferred Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in a relevant field (Information Security, Computer Science, Information Technology, etc.) or commensurate training and/or experience in information security. Master&rsquo;s degree preferred. Relevant experience may be substituted for the bachelor&rsquo;s degree on a year-for-year basis.
  </li>
  <li>
   Eight plus (8+) years of progressive experience in information technology, with a minimum of four (4) years in information security, risk management, security compliance, or IT auditing, and at least three (3) years in a security leadership or supervisory role.
  </li>
  <li>
   One (1) or more of the following certifications is required: CISSP, CISM, CRISC, or CCISO. Additional certifications such as CISA, GIAC, CIPM, CIPP, CEH, or GCIH are a plus.
  </li>
  <li>
   Expert knowledge of information security risk management principles and frameworks including NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls. In-depth understanding of state and federal regulations related to information security and data privacy, including FERPA, CJIS, IRS Publication 1075, and PCI DSS.
  </li>
  <li>
   Demonstrated experience in security operations, incident response, vulnerability management, identity and access management (IAM/PAM), vendor risk management, and business continuity planning. Experience with cloud security and securing hybrid IT environments.
  </li>
  <li>
   Strong interpersonal and communication skills with the ability to explain complex security concepts to executive-level and non-technical audiences. Ability to foster a cooperative, high-performing work environment and mentor technical staff.
  </li>
  <li>
   Knowledge of South Carolina state government procedures, procurement principles, and contracting practices is highly desirable. Prior experience in state or local government, education, healthcare, or another highly regulated environment preferred.
  </li>
  <li>
   Commitment to continually building on existing knowledge and skills to stay current on the latest cybersecurity threats, tools, and innovations. Desire to innovate and create cutting-edge solutions that make a significant impact in an empowering work environment.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Additional Comments
  <br/>
  <br/>
 </strong>
 As a part of a competitive compensation package, we offer comprehensive benefits that include generous paid time off, preeminent health care benefits, professional development opportunities, pension, a 401(k), and a hybrid work schedule with opportunity for remote work.
 <br/>
 <br/>
 The South Carolina Department of Education offers an exceptional benefits package that includes:
 <br/>
 <br/>
 <ul>
  <li>
   Health, Dental, Vision, Long Term Disability, and Life Insurance for Employee, Spouse, and Children.
  </li>
  <li>
   15 days annual (vacation) leave per year.
  </li>
  <li>
   15 days sick leave per year.
  </li>
  <li>
   13 paid holidays.
  </li>
  <li>
   State Retirement Plan and Deferred Compensation Programs (401(k) and 457 options).
   <br/>
   <br/>
  </li>
 </ul>
 ONLY THOSE APPLICANTS CHOSEN FOR AN INTERVIEW WILL BE NOTIFIED BY LETTER THAT THE POSITION HAS BEEN FILLED.
 <br/>
 <br/>
 http://www.ed.sc.gov/jobs/human-resources/title-ix-nondiscrimination/
</div>


Chief Information Security Officer (Senior IT Security Administrator) - 60024869

Search 10000+ Chief information security officer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 chief information security officer jobs Near Me

Chief Information Security Officer

Chief Information Security Officer

Director & Chief Information Security Officer

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer (Senior IT Security Administrator) - 60024869