ciso

PC99 Technologies & Innovation Group

<p><b>Job Title: Chief Information Security Officer (CISO)</b></p><p>PC99 Technologies &amp; Innovation Group is seeking a highly experienced and strategic <b>Chief Information Security Officer (CISO)</b> to lead the organization&rsquo;s global cybersecurity vision, governance, and risk management framework. This is a senior executive role designed for a leader who can shape enterprise security strategy, drive resilience, and protect mission-critical systems in a rapidly evolving threat landscape.</p><p>This position is ideal for a seasoned cybersecurity executive who thrives in high-impact leadership roles, builds world-class security programs, and aligns cybersecurity with business growth and innovation.</p><p><b>What You&rsquo;ll Do</b></p><ul><li>Define and lead the enterprise-wide cybersecurity strategy and roadmap</li><li>Oversee SOC, threat intelligence, incident response, and security engineering functions</li><li>Establish and enforce security governance, policies, and risk management frameworks</li><li>Lead organization-wide cyber risk assessments and mitigation strategies</li><li>Ensure compliance with global standards including ISO 27001, NIST, CIS, GDPR (where applicable)</li><li>Manage enterprise security architecture across cloud, hybrid, and on-prem environments</li><li>Oversee advanced threat detection, response, and recovery programs</li><li>Lead executive-level incident response and crisis management initiatives</li><li>Collaborate with CEO, CTO, and board members on cybersecurity posture and risk reporting</li><li>Drive security awareness culture across all departments</li><li>Evaluate and implement next-generation cybersecurity technologies and AI-driven defense systems</li></ul><p><b>What We&rsquo;re Looking For</b></p><ul><li>10+ years of experience in cybersecurity, with at least 5 years in leadership/executive roles</li><li>Proven experience as CISO, Head of Security, or Security Director in a large organization</li><li>Strong expertise in enterprise security architecture, SOC operations, and risk governance</li><li>Deep knowledge of cloud security (AWS, Azure, GCP) and hybrid infrastructure</li><li>Strong understanding of frameworks: ISO 27001, NIST CSF, CIS Controls, GDPR</li><li>Certifications preferred: CISSP, CISM, CCISO, CISA</li><li>Strong leadership, stakeholder management, and executive communication skills</li><li>Proven ability to lead security transformation programs at scale</li></ul><p><b>Why Join PC99 Technologies &amp; Innovation Group</b></p><ul><li>Executive leadership role shaping enterprise cybersecurity strategy</li><li>High-impact projects across global digital transformation initiatives</li><li>Opportunity to build and lead a world-class security organization</li><li>Exposure to advanced security technologies and enterprise-scale systems</li><li>Collaborative, innovation-driven leadership environment</li><li>Strong career influence at board and executive level</li></ul><p><b>Compensation and Schedule</b></p><ul><li>Performance-based executive incentives and bonuses</li><li>Full-time leadership role</li><li>On-site executive position with strategic flexibility and on-call escalation responsibility</li></ul><p><b>About the Company</b></p><p>PC99 Technologies &amp; Innovation Group is a fast-growing technology organization specializing in cybersecurity, digital transformation, and enterprise IT solutions. The company partners with global organizations to strengthen security posture, modernize infrastructure, and deliver future-ready digital ecosystems.</p><p><b>Apply Now</b></p><p>If you are ready to lead cybersecurity at an executive level and drive enterprise-wide security transformation, we invite you to submit your application today.</p><p>Pay: RO5,800.000 - RO10,500.000 per month</p><p>Work Location: In person</p>

Chief Information Security Officer (CISO)

TotalShield Cybersecurity & Risk Solutions

<p><b>Job Title: Chief Information Security Officer (CISO)</b></p><p><b>About the Opportunity</b></p><p>TotalShield Cybersecurity &amp; Risk Solutions is seeking a visionary and experienced <b>Chief Information Security Officer (CISO)</b> to lead our cybersecurity strategy, risk governance, and enterprise security operations across Kuwait and the wider GCC region.</p><p>This is a high-impact executive role for a leader who thrives in building secure digital environments, managing enterprise risk, and guiding organizations through complex cyber threats.</p><p>If you are passionate about cybersecurity leadership, strategic risk management, and protecting critical infrastructure &mdash; this role offers strong career growth, regional influence, and executive-level responsibility.</p><p><b>What We Offer</b></p><ul><li>Competitive executive-level compensation package</li><li>Strategic leadership role with regional impact</li><li>Opportunity to build and lead a modern cybersecurity program</li><li>Exposure to enterprise, government, and critical infrastructure clients</li><li>Fast-growing environment with leadership autonomy</li></ul><p><b>Key Responsibilities</b></p><ul><li>Develop and execute enterprise-wide cybersecurity strategy and roadmap</li><li>Lead Security Operations Center (SOC), incident response, and threat intelligence functions</li><li>Establish governance, risk, and compliance (GRC) frameworks</li><li>Oversee cybersecurity architecture, cloud security, and infrastructure protection</li><li>Manage enterprise risk assessments and regulatory compliance (local and international standards)</li><li>Lead incident response planning and breach management</li><li>Advise executive leadership on cyber risk posture and mitigation strategies</li><li>Build and mentor high-performing cybersecurity teams</li><li>Coordinate with external auditors, regulators, and strategic partners</li><li>Ensure continuous improvement of security posture across all systems</li></ul><p><b>Candidate Profile</b></p><ul><li>Proven experience in senior cybersecurity leadership roles (CISO, Head of Security, Director-level)</li><li>Strong background in cybersecurity frameworks (ISO 27001, NIST, etc.)</li><li>Experience in SOC operations, risk management, and enterprise security architecture</li><li>Strong leadership, communication, and stakeholder management skills</li><li>Experience in government, enterprise, or regulated industries is highly preferred</li><li>Ability to operate in fast-paced, high-security environments</li></ul><p><b>Why Join Us</b></p><p>At TotalShield, you will shape the cybersecurity direction of a growing regional organization. This role offers executive influence, high visibility, and the opportunity to build security programs from the ground up while working with advanced technologies and enterprise clients.</p><p><b>Call to Action</b></p><p>If you are ready to take on a strategic leadership role in cybersecurity and make a regional impact, we encourage you to apply today. Join us in building secure digital futures across Kuwait and the GCC.</p><p>Job Type: Full-time</p><p>Pay: KD4,000.000 - KD7,000.000 per month</p><p>Work Location: In person</p>

Ntiva

<p></p><div><p><b>Are you looking for limitless career opportunities with a company that values growth, innovation, and teamwork?</b> At Ntiva, we&rsquo;re more than a Managed Services Provider, we&rsquo;re a community dedicated to helping each other, our clients, and their businesses thrive both personally and professionally. Ntiva is a culture of people who are passionate about the work&hellip;and each other.</p>
<p>
Our clients view us as an essential part of their teams, relying on us for strategic guidance, fast solutions to complex challenges, and proactive support. With strategic locations across the U.S. and leadership from our founder, Steven Freidkin, we&rsquo;re on the front lines of a fast-paced industry, facing cybersecurity threats and rapid technology changes together.</p>
<p>
If you thrive in a dynamic, supportive environment and enjoy going above and beyond, we&rsquo;d love to meet you. Come explore one of our many opportunities and grow with us!</p>
<p><b>
About the Role</b></p>
<p>
We are a growing Managed Service Provider expanding our security leadership and building a unified security function across our business. This is a high-priority executive investment with a dual mandate: protect our internal operations and the clients who trust us with their infrastructure, while expanding our security service lines into a strategic revenue driver. You will own our security posture end-to-end, from internal risk and compliance, through our SOC and incident response capability, to client-facing vCISO engagements and the security products we bring to market.</p>
<p>
You will inherit a capable security team and have a direct line to the CTO and executive leadership. This is an ideal opportunity for a security leader with 7&ndash;10 years of experience ready to define what good looks like at a maturing MSP.</p><p><br>
<b>
What You'll Own</b></p>
<p><b>
Internal Security &amp; Compliance</b></p>
<ul>
<li>Define and execute the enterprise information security strategy activities, roadmap, and budget.</li>
</ul><ul><li>Own the internal risk management program: threat management, vulnerability management, access governance, and third-party risk.</li>
</ul><ul><li>Lead all compliance and audit activities including SOC 2 Type II, and CMMC Level 2 certification.</li>
</ul><ul><li>Serve as the executive security voice in client contracts, vendor contracts, security questionnaires, RFP responses and other compliance-related requests.</li>
</ul><ul><li>Drive the security awareness and training program across all employees and contractors.</li></ul><br>
<p><br>
<b>Incident Response &amp; SOC</b></p>
<ul>
<li>Lead the strategy, staffing model, and tooling for our 24x7 Security Operations Center.</li>
</ul><ul><li>Own the incident response program: runbooks, tabletop exercises, on-call rotations, and post-incident reviews.</li>
</ul><ul><li>Be the executive lead during active security incidents affecting the company or our clients, including customer and regulator communication.</li>
</ul><ul><li>Define detection engineering priorities and measure SOC effectiveness with clear KPIs (MTTD, MTTR, false-positive rate).</li></ul><br>
<p><br>
<b>Client-Facing Services (vCISO &amp; GRC)</b></p>
<ul>
<li>Scale and mature our vCISO service line: delivery methodology, playbooks, solution architecting and senior client relationships.</li>
</ul><ul><li>Directly advise our highest-value clients as their fractional CISO on strategy, board reporting, and regulatory posture.</li>
</ul><ul><li>Shape our Governance, Risk, and Compliance (GRC) consulting offering, including readiness assessments, policy development, and audit support across SOC 2, HIPAA, CMMC, NIST and other .</li>
</ul><ul><li>Partner with Sales to scope security engagements and convert technical credibility into pipeline.</li></ul><br>
<p><br>
<b>Security Product Development</b></p>
<ul>
<li>Partner with the CTO and Product team to define the roadmap for our security service offerings and any productized security tooling.</li>
</ul><ul><li>Translate threat landscape shifts and client pain into product requirements and differentiated offerings.</li>
</ul><ul><li>Represent the voice of the security practitioner in architecture and build-vs-buy decisions.</li></ul><br>
<p><br>
<b>Leadership</b></p>
<ul>
<li>Lead, mentor, and grow the existing security team; make the hiring and structural decisions needed to scale.</li>
</ul><ul><li>Report regularly to the CTO and executive team on security posture, risk, and program investment.</li>
</ul><ul><li>Represent the company's security practice externally at industry events, in analyst briefings, and with strategic partners.</li>
</ul><ul><li>Develop and implement strategics plans that support the integration of acquired security practices and for the organic growth of the existing business in line with corporate goals.</li>
</ul><ul><li>Maintain budgetary accountability for the Security Operations Team, and the Security Services Business Revenue.</li></ul><br>
<p><br>
<b>What You Bring</b></p>
<p><b>
Required</b></p>
<ul>
<li>7&ndash;10 years of security leadership experience, including 3+ years in a Chief Information Security Officer or equivalent role (IT Security Officer, Deputy CISO, Managing Partner, IT Security Practice).</li>
</ul><ul><li>Hands-on ownership and successful completion of multiple: SOC 2, HIPAA, CMMC, or NIST 800-171/800-53 audit cycles, including designing, leading and supporting the program.</li>
</ul><ul><li>Demonstrated experience leading incident response for material incidents, including executive and customer communication, response strategy and repeatable successful outcomes.</li>
</ul><ul><li>Experience managing and closely partnering with multiple 24x7 SOC teams (in-house, co-managed, and outsourced).</li>
</ul><ul><li>Track record of building or significantly scaling a security team and the program it runs.</li>
</ul><ul><li>Strong written and verbal communication, for example, demonstrated ability to move fluently between a board deck, a customer sales call, and a specific security service event.</li>
</ul><ul><li>Comfort in operating in a fast-moving, client-service environment where security is both internal function and a company revenue driver.</li>
</ul><ul><li>Warm and welcoming team-oriented demeanor with clear abilities to craft a positive security aware culture throughout an organization, and with its client base.</li><br>
</ul>
<p><b>Strongly Preferred</b></p>
<ul>
<li>Prior experience at an Enterprise Scale Organization, MSP, MSSP, or security consultancy.</li>
</ul><ul><li>Direct vCISO or fractional CISO client facing delivery experience.</li>
</ul><ul><li>Experience preparing an organization for new compliance certifications.</li>
</ul><ul><li>Relevant certifications such as CISSP, CISM, CCSP, or CISA.</li>
</ul><ul><li>Familiarity with the tooling common to MSP environments (RMM, PSA, EDR/XDR/AV, SIEM, ITDR, SAT etc).</li></ul><br>
<p><br>
<b>What Success Looks Like in Year One</b></p>
<ul>
<li>A single, articulated security strategy with executive and board buy-in.</li>
<li>Existing compliance frameworks maintained without findings.</li>
<li>World-Class SOC and incident response capability, with published metrics.</li>
<li>A productized vCISO offering with growing revenue, and named reference clients.
<ul><li>A security team that is stable, growing, and is a place that security people in our market want to work.</li></ul><br>
</li>
</ul><div></div><p><br>
<b>Compensation &amp; Logistics</b></p>
<ul>
<li>Candidates based in Chicago IL area preferred (commute to Lombard, IL); Other market options include Kansas City KS, New Orleans LA, Shreveport LA, Mc Lean VA</li>
<li>Work from home; regular travel (10% to 40% a month depending on circumstances) for leadership offsites, key client visits, industry events and other situations as required.</li>
<li>Base salary: $200,000&ndash;$275,000, depending on experience.</li>
<li>Annual performance bonus and equity participation.</li>
<li>Comprehensive medical, dental, vision, and 401(k) with match.</li>
</ul>
<p>The base pay offered may vary depending on multiple non-discriminatory factors including, but not limited to, market location, job-related knowledge, skills, and experience. The total compensation package for this position also includes medical benefits, 401(k) eligibility, and PTO. Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment.</p>
<p><b>
FLSA Status: </b>Salaried, Exempt</p>
<p><b>
Work Authorization Criteria</b></p>
<p>
This position requires U.S. citizenship due to federal government contract obligations and access to secured information systems.</p>
<p><b>
Workspace Requirements and Remote Work Policy</b></p>
<p>
Team members must establish a dedicated safe workspace that is free from distractions, hazards, and that is secure from unauthorized access. This includes following Ntiva&rsquo;s IT User and Security Policies that include but are not limited to password-protecting all equipment, keeping confidential and proprietary documents secure, refraining from using public Wi-Fi, having adequate arrangements in place to avoid significant interruptions from caregiving responsibilities during work hours (except in emergency situations with manager approval). Any remote work away from a team member&rsquo;s normal expected dedicated safe workspace must be requested by team member, is subject to review by management, and must adhere to Ntiva policies and procedures.<br>
<br>
<b>Our Commitment to a Diverse Workforce</b></p>
<p>
At Ntiva, we are committed to creating and maintaining a diverse, inclusive, and welcoming work environment for all employees and job applicants. We firmly believe that a diverse workforce fosters a wider range of perspectives, experiences, and ideas that lead to increased creativity, innovation, and problem-solving capabilities. As an equal opportunity employer, we actively seek to recruit and retain a diverse workforce that reflects the communities we serve. We prohibit discrimination of any kind, including but not limited to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, age, hair length, protective hairstyles, organ donor status, disability, veteran status, or any other legally protected status and comply with all applicable laws governing nondiscrimination in employment.<br>
<br>
<b>Application Deadline:</b> The sooner you apply, the sooner we can get to know you! Submit your resume today! Applications will be accepted until 05/27/26.</p></div>

Chief Information Security Officer

<p></p><div><p><b>Job Description:</b></p><p></p><p>
Cybersecurity Strategy and Communications Lead</p><p></p><p><b>
Collaborate with Innovative 3Mers Around the World</b></p><p>
Choosing where to start and grow your career has a major impact on your professional and personal life, so it&rsquo;s equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a wide variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3Mers.</p><p></p><p><b>
This position provides an opportunity to transition from other private, public, government or military experience to a 3M career.</b></p><p></p><p><b>
The Impact You&rsquo;ll Make in this Role</b></p><p></p><p>
At 3M, you will play a pivotal role supporting the Chief Information Security Officer (CISO) and the broader Cybersecurity organization by designing and executing communication strategies that elevate visibility, understanding, and engagement around the Information Security Risk and Compliance (ISRC) program.</p><p></p><p>
As the Cybersecurity Strategy and Communications Lead, you will:</p><ul><li>
Serve as a primary communications advisor to the CISO, crafting and delivering messaging for executive committees, senior leadership, and governance forums.</li><li>
Provide direct hands‑on support to the CISO for the creation of high‑impact PowerPoint presentations that articulate cybersecurity strategy, risk posture, and organizational progress.</li><li>
Lead and manage ISRC&rsquo;s end‑to‑end communications services, including content development, planning, and distribution for internal audiences.</li><li>
Oversee and justify use of temporary and offshore communications staff to meet fluctuating demand, ensuring effective resource utilization and continuity of messaging.</li></ul><p></p><p>
Here, you will make an impact by:</p><p></p><p>
Cybersecurity Communications</p><ul><li>
Develop, edit, and publish cybersecurity and risk communications that reach global employee audiences with clarity and consistency.</li><li>
Manage ISRC&rsquo;s communications calendar and deliverables, aligning priorities with broader Cybersecurity and corporate communication objectives.</li><li>
Coordinate review and approval workflows to maintain quality, accuracy, and branding alignment.</li><li>
Evaluate workload and resource needs, providing business justification for temporary or offshore support as demand requires.</li></ul><p></p><p>
Cybersecurity Portal Pages</p><ul><li>
Build and maintain Cybersecurity and Security Awareness portal pages that are engaging, accessible, and aligned with organizational messaging standards.</li><li>
Collaborate cross‑functionally to ensure portal content reflects current cybersecurity initiatives and is optimized for user experience.</li><li>
Apply consistent tone, navigation structure, and branding across portal sites to promote awareness and compliance.</li></ul><p></p><p>
Strategic Presentation Support and Coordination</p><ul><li>
Partner directly with the CISO to design compelling PowerPoint presentations and visual materials for use in executive committee meetings, board updates, and leadership engagements.</li><li>
Transform complex data and technical subjects into visually clear, concise, and persuasive communication materials.</li><li>
Coordinate with ISRC leaders to gather relevant metrics, insights, and narratives for inclusion in dashboards, reports, and strategic planning briefings.</li><li>
Standardize presentation templates and messaging themes across the Cybersecurity organization to ensure coherence and professionalism.</li></ul><p></p><p>
Meeting Coordination and Documentation</p><ul><li>
Organize extended leadership meetings, town halls, and all‑hands sessions focused on Cybersecurity and ISRC priorities.</li><li>
Draft agendas, document discussions, and capture detailed action items to ensure accountability.</li><li>
Monitor and track progress on follow‑up actions from leadership forums.</li></ul><p></p><p>
Support for Annual Security Awareness Month</p><ul><li>
Collaborate with the Human Cyber Risk Management team to lead communications and event planning for Annual Security Awareness Month.</li><li>
Develop awareness campaigns, multimedia materials, and signage that resonates across business units and employee groups.</li><li>
Measure engagement through participation metrics and feedback, providing recommendations for continuous improvement.</li></ul><p></p><p><b>
Your Skills and Expertise</b></p><p>
To set you up for success in this role from day one, 3M requires (at a minimum):</p><p></p><ul><li>
Bachelor&rsquo;s degree in communications, Cybersecurity, Information Technology,<p>
or technology field (completed and verified prior to start)</p></li><li><p>
Two (2) year of directly supporting a CISO or senior technology executive in preparing and delivering PowerPoint presentations and strategic communications in a private, public, government or military environment</p></li><li><p>
Five (5) years of experience in corporate or cybersecurity communications.</p></li></ul><p></p><p>
Additional qualifications that could help you succeed even further:</p><ul><li>
Demonstrated experience directly supporting a CISO or senior technology executive in preparing and delivering PowerPoint presentations and strategic communications.</li><li>
Proven professional experience in corporate or cybersecurity communications.</li><li>
Exceptional written and verbal skills tailored to executive audiences.</li><li>
Advanced proficiency in Microsoft Office Suite, especially PowerPoint, and collaboration tools.</li><li>
Strong skills in SharePoint Online development and content management.</li><li>
Highly organized project management capability and ability to manage multiple deliverables simultaneously.</li><li>
Collaborates effectively with cross‑functional and global teams.</li><li>
Experience in web content management, digital design, and SharePoint governance.</li><li>
Familiarity with cybersecurity principles, metrics, and organizational risk concepts.</li><li>
Experience managing or justifying temporary or offshore communications resources.</li><li>
Professional certification in cybersecurity, public relations, or communications.</li></ul><p></p><p><b>
Work location:
</b></p><ul><li><b>Work location: This role follows an on-site working model, requiring the employee to work at least four days a week at the 3M Center in Maplewood, MN.</b></li><li><b>
Travel: May include up </b><b>to 5% domestic</b></li><li><b>
Relocation: May be authorized</b></li></ul><p></p><p><b>
Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).</b></p><p></p><p><b>
Supporting Your Well-being</b></p><p>
3M offers many programs to help you live your best life &ndash; both physically and financially. To ensure competitive pay and benefits, 3M regularly benchmarks with other companies that are comparable in size and scope.</p><p></p><p><b>
Chat with Max</b></p><p>
For assistance with searching through our current job openings or for more information about all things 3M, visit Max, our virtual recruiting assistant on 3M.com/careers.</p><p></p>
Applicable to US Applicants Only:The expected compensation range for this position is $164,612 - $201,193, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate&rsquo;s relevant knowledge, training, skills, work location, and/or experience. In addition, this position may be eligible for a range of benefits (e.g., Medical, Dental &amp; Vision, Health Savings Accounts, Health Care &amp; Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/.<p></p>
All US-based 3M full time employees will need to sign an employee agreement as a condition of employment with 3M. This agreement lays out key terms on using 3M Confidential Information and Trade Secrets. It also has provisions discussing conflicts of interest and how inventions are assigned. Employees that are Job Grade 7 or equivalent and above may also have obligations to not compete against 3M or solicit its employees or customers, both during their employment, and for a period after they leave 3M.<p></p>
Learn more about 3M&rsquo;s creative solutions to the world&rsquo;s problems at www.3M.com or on Instagram, Facebook, and LinkedIn @3M.<p></p>
Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties.<p></p>
Safety is a core value at 3M. All employees are expected to contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.<p></p>
Pay &amp; Benefits Overview: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/<p></p>
3M does not discriminate in hiring or employment on the basis of race, color, sex, national origin, religion, age, disability, veteran status, or any other characteristic protected by applicable law.<p></p><p><b>
Please note: your application may not be considered if you do not provide your education and work history, either by: 1) uploading a resume, or 2) entering the information into the application fields directly.</b></p><p></p><p><b>
3M Global Terms of Use and Privacy Statement</b></p><p><br>
Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at 3M are conditioned on your acceptance and compliance with these terms.</p><p></p><p>
Please click on the following links and select the country where you are applying for employment to review the applicable Terms of Use (link here) and Privacy Policy (link here). Before submitting your application, you will be asked to confirm your agreement with the terms.</p></div>

Cybersecurity Strategy and Communications Lead

Care New England Health System

<p></p><div><div><div><div><div><b>Department:</b></div> <div>CNE-IS ADMINISTRATION</div>
</div><br>
<div><div><b>Operating Unit</b></div> <div>Care New England
<br>
</div></div><br>
<div><div><b>Location:</b></div> <div>Warwick, RI
<br>
</div></div><br>
<div><div><b>Job ID:</b></div> <div>24299
<br>
</div></div><br>
<div><div><b>Job Status:</b></div> <div>Full Time
<br>
</div></div><br>
<div><div><b>Shift: </b></div><div>Days
<br>
</div></div><br>
<div><div><b>Schedule:</b></div> <div>Other<br>
<br>
</div></div><br>
</div></div><div><p><b>Job Summary:</b></p>
<p>The Director, Information Security holds primary responsibility for safeguarding the Care New England (CNE) computing environment. This includes securing systems across all CNE operating units, directing enterprise-wide cybersecurity strategy, and ensuring compliance with HIPAA, PCI, and all applicable federal, state, local, and industry regulations.</p>
<p>The Director serves as the Chief Information Security Officer (CISO) for CNE, providing leadership in risk assessment, incident response, regulatory compliance, and cybersecurity governance. The role oversees information security tools, policies, vulnerability assessments, and monitoring systems; responds to security threats; leads mitigation activities; and collaborates closely with IS teams, Audit/Compliance, HR, Finance, and Legal.</p>
<p>This leader develops and manages the Information Security program, directs security staff, sets security standards, leads incident management, evaluates emerging technologies, manages vendor relationships, and ensures organizational readiness through education, training, and participation in business continuity and disaster recovery planning.</p>
<p><b>Duties and Responsibilities:</b></p>
<ul><li>Develop and maintain the enterprise Information Security Program.
</li><li>Establish protection goals, objectives, and metrics aligned with organizational strategy.
</li><li>Serve as the Chief Information Security Officer (CISO) for CNE.
</li><li>Coordinate with the Chief Privacy Officer to ensure compliant reporting of security incidents.
</li><li>Implement, manage, and maintain enterprise security systems and applications.
</li><li>Lead vulnerability assessments and ensure timely remediation.
</li><li>Oversee security incident response, forensic investigations, and threat mitigation efforts.
</li><li>Examine emerging technologies and assess their security implications.
</li><li>Lead ongoing risk assessment programs addressing information security and privacy.
</li><li>Ensure compliance with HIPAA, PCI, and applicable state and federal regulations.
</li><li>Develop and implement security policies, standards, guidelines, and procedures.
</li><li>Coordinate with IS teams, Audit/Compliance, HR, Finance, and Legal to align security efforts.
</li><li>Participate in disaster recovery and business continuity planning.
</li><li>Lead security education and awareness initiatives for staff across CNE.
</li><li>Manage security vendors responsible for operations, maintenance, and enhancements.
</li><li>Ensure vendor service delivery aligns with organizational security requirements and policies.
</li><li>Negotiate and manage contracts and service-level agreements with external partners.
</li><li>Manage, mentor, and develop information security staff.
</li><li>Promote professional growth and maintain awareness of industry trends.
</li><li>Provide input on resource allocation and security budgeting.
</li><li>Maintain 24-hour on-call availability to support critical operational needs.
</li><li>Perform other job-related duties as assigned.</li></ul>
<p><b>Requirements:</b></p>
<p>Bachelor's Degree Required (computer science, MIS or related field)</p>
<p>Minimum of 7-10 years of progressive experience in information security, Strong technical background in infrastructure, network security, firewalls, and cloud environments, Experience conducting forensic investigations and managing enterprise security products.</p>
<p>Security certifications required: CISSP, GIAC, SANS, or similar. Audit certification preferred: CISA.</p>
<p>Participation in national and regional security organizations preferred.</p>
<ul><li>Deep knowledge of cybersecurity principles, threat landscapes, and protection technologies.
</li><li>Strong working knowledge of enterprise infrastructure, network security, firewalls, and cloud platforms.
</li><li>Expertise in vulnerability management, forensic investigation, risk assessment, and incident response.
</li><li>Ability to develop enterprise-wide policies and governance frameworks.
</li><li>Strong communication skills for engaging executive leadership and cross-functional stakeholders.
</li><li>Exceptional organization, analytical, and decision-making abilities.
</li><li>Ability to manage technical teams and develop staff.
</li><li>Strong vendor management and contract negotiation skills.
</li><li>Ability to maintain confidentiality and uphold ethical and regulatory standards</li></ul>
<p>Additional Information:
<br>
Care New England Health System (CNE) and its member institutions, Butler Hospital, Women &amp; Infants Hospital, Kent Hospital, VNA of Care New England, Integra, The Providence Center, and Care New England Medical Group, and our Wellness Center, are trusted organizations fueling the latest advances in medical research, attracting top specialty-trained doctors, and honing renowned services and innovative programs to engage in the important discussions people need to have about their health.</p>
<p>EEOC Statement: Care New England is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.</p>
<p>Ethics Statement: Employee conducts himself/herself consistent with the ethical standards of the organization including, but not limited to hospital policy, mission, vision, and values.
<br>
Americans with Disability Act Statement: External and internal applicants, as well as position incumbents who become disabled must be able to perform the essential job-specific functions either unaided or with the assistance of a reasonable accommodation, to be determined by the organization on a case-by-case basis.</p></div></div><div></div>

Director Information Security

Texas Comptroller of Public Accounts

<div><div><b>OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234</b> <b>(</b><b>00056888</b><b>)</b><div>
</div><b>
Organization</b><b>:</b> OFFICE OF THE ATTORNEY GENERAL<div>
</div></div><div><b>
Primary Location</b><b>:</b> Texas-Austin<div>
</div><b>
Work Locations</b><b>:</b> ITS - Admin 300 W. 15th St Austin 78701<div></div><div><br>
</div></div><div><b>
Job</b><b>:</b> Computer and Mathematical<div>
</div></div><div><b>
Employee Status</b><b>:</b> Regular<div>
</div></div><div><b>
Schedule</b><b>:</b> Full-time<div>
</div><b>
Standard Hours Per Week</b><b>:</b> 40.00<div>
</div></div><div><b>
State Job Code</b><b>:</b> 0239<div>
</div></div><div><b>
Salary Admin Plan</b><b>:</b> B<div>
</div></div><div><b>
Grade</b><b>:</b> 32<div>
</div></div><div><b>
Salary (Pay Basis)</b><b>:</b> 14,583.33 - 17,083.34 (Monthly)<div>
</div></div><div><b>
Number of Openings</b><b>:</b> 1<div>
</div></div><div><b>
Overtime Status</b><b>:</b> Exempt<div>
</div></div><div><b>
Job Posting</b><b>:</b> Mar 12, 2026, 3:24:05 PM<div>
</div></div><div><b>
Closing Date</b>: Ongoing<div>
</div></div><div><b>
Description</b><div></div><p><b><br>
GENERAL DESCRIPTION</b><br>
The CISO leads the Office of the Attorney General&rsquo;s (OAG) information security program, setting vision and strategy to protect information assets, systems, and infrastructure. This role partners with internal divisions, state and federal agencies, and vendors to implement best-in-class security practices aligned with policies and standards.</p><div>
Key responsibilities include:<br>
<ul><li>Developing, maturing, and executing OAG&rsquo;s cybersecurity strategy and program.</li><li>Advising the Office of the CIO on security risks and acceptable risk levels.</li><li>Overseeing cybersecurity operations, risk management, and incident response.</li><li>Embedding security into digital transformation initiatives, including cloud expansion and modernization.</li><li>Driving adoption and enforcement of security policies and procedures.</li><li>Leading a high-performing team of security professionals.</li></ul></div><p>
The ideal candidate demonstrates servant leadership, fosters collaboration, and proactively addresses emerging threats. This position reports to the CIO and supports OAG&rsquo;s mission to deliver secure, high-quality technology services for Texans.</p><p>
The OAG is a dynamic state agency with over 4,000 employees throughout the State of Texas, and is committed to providing innovative, modern, and value-driven IT services to the agency. We believe that having talented people in the right place while effectively utilizing new tools and technologies enables us to empower the agency to best serve the people of Texas. OAG employees enjoy excellent benefits (https://ers.texas.gov/Benefits-at-a-Glance) along with tremendous opportunities to do important work at a large, dynamic state agency making a positive difference in the lives of Texans.</p><p><b><br>
ESSENTIAL POSITION FUNCTIONS</b></p><ul><li>
Leads the agency&rsquo;s information security function to ensure consistent, high-quality security management aligned with agency goals and the protection of information assets, technologies, applications, systems, infrastructure, and processes.</li><li>
Establishes and enforces cybersecurity standards, policies, and procedures to maintain service continuity during changes, security incidents, or disaster recovery events.</li><li>
Develops and oversees a strategic, comprehensive information security program ensuring confidentiality, integrity, availability, privacy and recovery of organizational information assets.</li><li>
Operates and manages the Security Operations Center (SOC) to monitor infrastructure for cyber threats, including external attacks and insider risks.</li><li>
Builds and leads a skilled team of security professionals responsible for risk reduction, incident response, and collaboration with business and technical stakeholders during cyber events.</li><li>
Directs threat intelligence collection, analysis, and dissemination to internal teams and partner organizations to strengthen cybersecurity posture.</li><li>
Conducts security assessments, risk analyses, and audits; defines and maintains security standards and compliance requirements.</li><li>
Represents the agency in internal and external forums on information security strategy and represents information security in IT and executive governance committee.</li><li>
Oversees security awareness, communication, and training programs to promote a strong security culture across the organization.</li><li>
Performs related work as assigned</li><li>
Maintains relevant knowledge necessary to perform essential job functions</li><li>
Attends work regularly in compliance with agreed-upon work schedule. Telework schedules are permitted for employees based on the agency&rsquo;s approved Telework Plan (if schedule does not adversely affect operations and service levels, and standard hours of operation are maintained). Telework schedules are set by the Departments based on business needs.</li><li>
Ensures security and confidentiality of sensitive and/or protected information</li><li>
Complies with all agency policies and procedures, including those pertaining to ethics and integrity</li></ul><div>
</div></div><div><b>
Qualifications</b><div></div><p><b><br>
MINIMUM QUALIFICATIONS</b></p><ul><li>
Education: Graduation from high school or equivalent</li><li>
Education: Graduation from an accredited four-year college or university with major coursework in cybersecurity, information technology, computer engineering, computer information systems, computer science, management information systems, or a related field is generally preferred; experience in the following (or closely related) fields may be substituted for the required education on a year-for-year basis: information security, information technology, or risk management</li><li>
Experience: 10 years of full-time experience working in the following (or closely related) fields: information security, information technology, or risk management</li><li>
Experience and technical mastery in cybersecurity analysis work, with emphasis on security operations, incident management, intrusion detection, information protection, security systems deployment, and security event analysis</li><li>
Experience in building and/or maturing a Security Operations Center, including the integration of monitoring, threat intelligence, forensic analysis, and incident response</li><li>
Knowledge of local, state, and federal laws and regulations relevant to information security, privacy, and computer crime; of the principles and practices of public administration and management; of the limitations and capabilities of computer systems; of technology across all network layers and computer platforms; of operational support of networks, operating systems, Internet technologies, databases, and security applications; of cybersecurity controls, procedures, and regulations; and of incident response program practices and procedures</li><li>
Skill in the use of a computer and applicable software; and in configuring, deploying, and monitoring security infrastructure</li><li>
Ability to manage and oversee the development, monitoring, and maintenance of security processes and controls; to identify problems, evaluate alternatives, and implement effective solutions; to develop and evaluate policies and procedures; to prepare reports; to implement security best practices and awareness; to communicate effectively; and to supervise the work of others</li><li>
Ability to provide excellent customer service</li><li>
Ability to arrange for personal transportation for business-related travel</li><li>
Ability to work more than 40 hours as needed and in compliance with the FLSA</li><li>
Ability to lift and relocate 10 lbs.</li><li>
Ability to travel (including overnight travel) up to 10%</li></ul><p><b><br>
PREFERRED QUALIFICATIONS</b></p><ul><li>
Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC)</li></ul><p><b>
TO APPLY</b></p><p>
To apply for a job with the OAG, electronic applications can be submitted through CAPPS Recruit. A State of Texas application must be completed to be considered, and paper applications are not accepted. Your application for this position may subject you to a criminal background check pursuant to the Texas Government Code. Military Crosswalk information can be accessed at https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf</p><p><b>
THE OAG IS AN EQUAL OPPORTUNITY EMPLOYER</b></p></div></div>

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234

Orange Business

<div>
 <strong>
  About Us
  <br/>
  <br/>
 </strong>
 Join us at Orange Business!
 <br/>
 <br/>
 We are a network and digital integrator that understands the entire value chain of the digital world, freeing our customers to focus on the strategic initiatives that shape their business.
 <br/>
 <br/>
 Every day, you will collaborate with a team dedicated to providing consistent, sustainable global solutions, no matter where our customers operate. With over 30,000 employees across Asia, the Americas, Africa, and Europe, we offer a dynamic environment to develop and perfect your skills in a field filled with exciting challenges and opportunities.
 <br/>
 <br/>
 <strong>
  Role Overview
  <br/>
  <br/>
 </strong>
 <strong>
  About the role
  <br/>
  <br/>
 </strong>
 As a key contributor to the security of our information security management system, you will serve as the overall guarantor for the security of our cloud administration infrastructure. Joining the security office, you will assume the responsibilities of a delegated Chief Information Security Officer (CISO) for your designated area, operating under the Business Security Officer service. In this role, you will vigilantly monitor for threats affecting your area of responsibility, and your expertise will be validated by industry-recognized certifications.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 At the intersection of critical cloud success factors - security and reliability, the Business Security Officer engages in a wide array of activities, requiring strong analytical and adaptable skills. Your mission encompasses a diverse set of tasks; expertise in all fields is not mandatory for application.
 <br/>
 <br/>
 <ul>
  <li>
   Conduct expert assessments and consultancy, including risk analysis, penetration testing, and vulnerability audits.
  </li>
  <li>
   Ensure that Orange designs and operates services in line with management&rsquo;s security requirements, acting as an expert security advisor to operational teams.
  </li>
  <li>
   Develop and implement necessary documentation and controls to maintain security standards.
  </li>
  <li>
   Report regularly on the service&rsquo;s security status.
  </li>
  <li>
   Coordinate the management of security incidents.
  </li>
  <li>
   Raise awareness and reinforce safety rules among operational staff.
  </li>
  <li>
   Contribute to the continuous improvement of Orange security practices, collaborating with peers in a Plan-Do-Check-Act framework.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Specific Activities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Perform risk and vulnerability analyses, create security assurance plans, and monitor relevant indicators.
  </li>
  <li>
   Follow up on external audits and implement security control points.
  </li>
  <li>
   Review security measures with cloud operational teams and conduct awareness sessions for these teams.
  </li>
  <li>
   Analyze security incidents and evaluate architecture or processes to propose improvements.
  </li>
  <li>
   Track action plans resulting from controls and analyses.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About You
  <br/>
  <br/>
 </strong>
 <strong>
  Educational Background and Experience
  <br/>
  <br/>
 </strong>
 Candidates should possess a higher degree, typically an engineering or a Master's degree in IT. While this educational foundation is important, having a proven track record with minimum of six years of experience in the cybersecurity field is a significant advantage.
 <br/>
 <br/>
 <strong>
  Core Security Skills And Certifications
  <br/>
  <br/>
 </strong>
 A strong interest in security and additional expertise in the following areas will further strengthen your candidacy:
 <br/>
 <br/>
 <ul>
  <li>
   Holding certifications such as CISSP, CISM, CISA, or equivalent credentials.
  </li>
  <li>
   Possession of vendor-specific certifications is preferred, including but not limited to Cisco, Fortinet, and Palo Alto.
  </li>
  <li>
   Solid understanding of security frameworks and standards, particularly ISO 27000 series.
  </li>
  <li>
   Comprehensive knowledge of encryption methods and networking protocols.
  </li>
  <li>
   Familiarity with ITIL processes and their application in operational environments.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Interpersonal And Professional Skills
  <br/>
  <br/>
 </strong>
 Proficiency in English is essential for this position. French language skills are a valuable asset. Strong interpersonal abilities are essential for effective collaboration within teams, both with operational staff and management. The ideal candidate demonstrates the following qualities:
 <br/>
 <br/>
 <ul>
  <li>
   Capability to engage and communicate with customers, adapting to both technical and high-level interactions.
  </li>
  <li>
   Sensitivity to customers&rsquo; corporate cultures and the ability to understand and respect their unique needs and differences.
  </li>
  <li>
   A customer satisfaction-oriented mindset, prioritizing positive outcomes for client engagements.
  </li>
  <li>
   Capacity to work autonomously, demonstrating initiative and independence.
  </li>
  <li>
   Proactive identification of problems and the ability to deliver effective solutions.
  </li>
  <li>
   Skill in creating professional dashboards and documentation that meet or exceed customer expectations.
  </li>
  <li>
   Ability to offer guidance, coordination, and leadership, especially in the context of security crises.
   <br/>
   <br/>
  </li>
 </ul>
 You bring a can-do attitude, tackle challenges head-on and challenge the status quo with new and innovative ideas.
 <br/>
 <br/>
 <strong>
  What We Offer
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Global Opportunities: Work in multi-national teams with opportunity to collaborate with colleagues and customers from all over the world.
  </li>
  <li>
   Flexible Work Environment: Flexible working hours and possibility to combine work from office and home (hybrid ways of working).
  </li>
  <li>
   Professional Development: training programs and upskilling/re-skilling opportunities.
  </li>
  <li>
   Career Growth: Internal growth and mobility opportunities within Orange.
  </li>
  <li>
   Caring and Daring Culture: Health and well-being programs and benefits, diversity &amp; inclusion initiatives, CSR and employee connect events.
  </li>
  <li>
   Reward Programs: Employee Referral Program, Change Maker Awards.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Only Your Skills Matter
  <br/>
  <br/>
 </strong>
 Regardless of your age, gender identity, race, ethnic origin, religion/belief, sexual orientation, marital status, neurotype, disability, veteran status or appearance, we encourage diversity within our teams because it is a strength for the collective and a vector of innovation. Orange Group is a disabled-friendly company and equal opportunity employer: don't hesitate to tell us about your specific needs.
</div>


Business Security Officer

Search 28+ Ciso jobs near you this May. New roles added regularly across leading industries. Apply today.

28 ciso jobs Near Me

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer

Cybersecurity Strategy and Communications Lead

Director Information Security

OAG - Enterprise Information Security | Chief Information Security Officer | 26-0234

Business Security Officer