information security officer

Leeds Professional Resources

<div>
 
 We are seeking an ISO to join our client's team! An Information Security Officer (ISO) protects an organization&rsquo;s data and IT infrastructure from cyber threats by developing security policies, monitoring networks, and conducting risk assessments. They implement protective measures like firewalls, manage incident responses, and ensure compliance.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 
 Security Strategy:
 
 Creating, updating, and enforcing company-wide information security policies and procedures.
 </li>
 <li>
 
 Risk Management:
 
 Identifying, assessing, and mitigating risks through vulnerability assessments and penetration testing.
 </li>
 <li>
 
 Incident Response:
 
 </li>
 <li>
 Leading the response to security breaches, viruses, and malware incidents.
 </li>
 <li>
 
 Monitoring &amp; Protection:
 
 Overseeing security operations, including firewall management, intrusion detection, and data encryption.
 </li>
 <li>
 
 Compliance:
 
 Ensuring IT systems adhere to legal, regulatory, and industry standards.
 </li>
 <li>
 
 Training:
 
 Educating employees on security best practices, such as phishing awareness and password management.
 </li>
 </ul>
 
 
 
 
 
 Required Skills and Qualifications
 
 
 <ul>
 <li>
 Bachelor's degree in cybersecurity, computer science, or a related field
 </li>
 <li>
 Professional certifications like CISSP, CISM, or Security+ a plus.
 </li>
 <li>
 Strong analytical abilities to identify vulnerabilities
 </li>
 <li>
 Communication skills to explain technical risks to non-technical staff.
 </li>
 </ul>
</div>

Information Security Officer

UNIUNI

<div>About UniUni
UniUni is a late-stage last-mile logistics company operating across the United States and Canada. We move millions of parcels for some of the largest e-commerce platforms in North America, and our technology stack is cloud-native, on AWS. 
We hold an active ISO 27001 certification and SOC 2 Type II attestation. Security and compliance are not afterthoughts at UniUni; they are central to our enterprise customer commitments, investor expectations, and the trust our drivers, shippers, and partners place in us every day. 
Role Snapshot
Reports to: Chief Technology &amp; Product Officer (CTPO)
Location: North America (remote with periodic travel to UniUni hubs)
Scope: Worldwide operations with focus on North America<h4 class="jobSectionHeader"> 
The Role</h4>
We are hiring an Information Security Officer to lead UniUni's security and governance function end to end. This is a hands-on leadership role reporting directly to the CTPO. You will own the security program across cloud infrastructure, application security, data security and governance, corporate IT, compliance, and risk, and you will be the senior accountable owner for our ISO 27001 certification and SOC 2 Type II attestation. 
You will work closely with engineering, platform, IT, legal, and executive leadership, and you will be UniUni's primary security voice in front of customers, auditors, and investors. You will build and lead a small, high-leverage team and set the bar for how security operates as the business scales.<h4 class="jobSectionHeader"> 
Key Responsibilities</h4> 
Cloud Security
Set the security posture of our AWS environments, including IAM, network segmentation, encryption, logging, secrets management, and workload protection.
Drive cloud security baselines aligned to CIS Benchmarks and the AWS Well-Architected Security Pillar, and enforce them through infrastructure as code and platform guardrails.
Lead continuous monitoring and threat detection across cloud workloads using native AWS services (GuardDuty, Security Hub, CloudTrail, Config) and complementary third-party tooling.
Run vulnerability management for cloud infrastructure, including patching cadence, remediation SLAs, and exception governance. 
Application Security
Embed secure development practices into the SDLC, including threat modeling, secure code review, SAST, DAST, SCA, and secrets scanning in CI/CD.
Partner with engineering leaders to triage and remediate application vulnerabilities without slowing delivery.
Run the open source software program, including license compliance, vulnerability tracking, and remediation.
Manage the external penetration testing program, from scoping and vendor selection through findings triage and remediation verification.
Set and evolve standards for authentication, authorization, session management, and API security across internal and customer-facing applications.
Deliver enterprise SSO (SAML 2.0 and OpenID Connect) for customer-facing products in support of contractual security commitments. 
Data Security and Governance
Own the data security program end to end, covering data classification, encryption in transit and at rest, key and secrets management, and protections against unauthorized access, exfiltration, and misuse.
Maintain and evolve the data classification framework across UniUni's regional and shared data warehouse environments, and drive schema-level classification into operational use by engineering and analytics teams.
Govern access to production databases, data warehouses, and analytics platforms, including approval workflows, periodic access reviews, and audit trails.
Implement and operate data loss prevention controls across endpoints, email, SaaS, and cloud storage, calibrated to the sensitivity of the data and the realities of how the business operates.
Set and enforce data residency, retention, and minimization standards in line with customer commitments and regulatory obligations across the jurisdictions in which UniUni operates.
Partner with engineering, data, and product teams on privacy by design, including data flow mapping, data sharing agreements, and the secure handling of personal information for shippers, drivers, and end recipients.
Lead the response to data subject requests, data incidents, and breach notification obligations under applicable privacy laws. 
Compliance and Governance
Maintain and continuously improve UniUni's ISO 27001 certification, including surveillance audits, internal audits, risk assessments, and management reviews.
Sustain UniUni's SOC 2 Type II attestation, owning control operation, evidence collection, auditor relationships, and remediation.
Own the information security policy framework, including authoring, approval workflows, annual reviews, and employee attestations.
Operate the risk management program, including the risk register, risk treatment plans, and executive risk reporting.
Lead customer-facing security activities, including security questionnaires, contract reviews, and security clauses in vendor and customer agreements.
Support regulatory compliance efforts relevant to our business, including the DOJ Data Security Program, Canadian PIPEDA, and applicable US state privacy laws. 
IT Security and Operations
Partner with IT to operate and mature endpoint security, including EDR, MDM (Intune), disk encryption, and device compliance.
Govern identity and access across SaaS and corporate systems, including SSO adoption, MFA enforcement, privileged access controls, and joiner-mover-leaver processes.
Own the SaaS inventory and run periodic access reviews, with particular attention to shadow IT and uncontrolled data flows.
Lead security awareness training and phishing simulation programs.
Run the incident response program, including the IR plan, tabletop exercises, on-call rotation, and post-incident reviews.
Contribute to business continuity and disaster recovery planning in partnership with engineering and operations. 
Leadership and Stakeholder Engagement
Build and lead a small security team, with hiring underway across two tracks: Compliance and GRC, and Application and Platform Security.
Serve as UniUni's senior security voice with customers, prospects, auditors, regulators, and investors.
Report on security program status, KPIs, and risks to the CTPO and the executive team on a regular cadence.
Represent security considerations in cross-functional decisions across product, infrastructure, vendor selection, and business expansion.<h4 class="jobSectionHeader"> 
Required Qualifications</h4>
10+ years in information security, with at least 3 years owning a security program or a major security domain.
Demonstrated ownership of ISO 27001 certification maintenance and SOC 2 audit execution in a cloud-native organization.
Deep hands-on experience securing AWS environments at scale, including IAM, networking, logging, and workload protection.
Strong application security background across secure coding practices, common vulnerability classes, and modern AppSec tooling (SAST, DAST, SCA, secrets scanning).
Demonstrated experience building data security and governance programs, including data classification, encryption, DLP, access governance for data stores, and privacy-aligned data handling.
Practical experience with SAML 2.0 and OpenID Connect, and a track record of rolling out enterprise SSO and MFA.
Experience operating core IT security controls, including EDR, MDM, and SaaS access governance.
Track record of leading incident response, including coordination with engineering, legal, and executive stakeholders.
Ability to translate security risk into business terms for non-technical executives, customers, and investors, in writing and in person. 
Preferred Qualifications
Background in logistics, supply chain, or high-volume transactional businesses.
Experience in an organization with worldwide cross-border data flows and a focus on North America.
Familiarity with the DOJ Data Security Program and bulk data transfer rules.
Hands-on experience with the Microsoft security stack (E5, Defender, Entra, Purview, Intune), and the perspective to evaluate it against alternatives such as CrowdStrike.
Relevant certifications such as CISSP, CCSP, CISM, or ISO 27001 Lead Auditor or Lead Implementer.
Prior experience taking a late-stage company through IPO-readiness security maturation.<h4 class="jobSectionHeader"> 
What You Will Find at UniUni</h4>
A direct reporting line to the CTPO and regular exposure to the CEO, CFO, and the rest of the executive team.
A security program with real executive commitment, a live ISO 27001 certification, and an active SOC 2 Type II attestation.
Meaningful autonomy to shape the program and the team, balanced by the discipline and cadence of a late-stage operating company.
A growing business with the operational complexity, customer scrutiny, and learning opportunities that come with scale.<h4 class="jobSectionHeader"> 
How We Work</h4> 
We value direct, precise, and accurate communication. We prefer honest and defensible language over favorable framing. We write concise documentation, our meeting minutes stand up to auditor review, and we make decisions with our customers and our long-term credibility in mind. 
Equal Opportunity
UniUni is an equal opportunity employer. We evaluate candidates on the basis of qualifications, experience, and demonstrated ability, and we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, or any other protected characteristic.</div>

Public Company Accounting Oversight Board (PCAOB)

<div>
 
 Join us and make a difference in global investor protection.
 
 
 
 
 Who We Are
 
 
 
 The Public Company Accounting Oversight Board (PCAOB), a nonprofit organization established by Congress, oversees the audits of public companies and SEC-registered brokers and dealers to protect investors and to further the public interest in the preparation of independent, accurate, and informative audit reports.
 
 
 Our investor protection mission is focused on modernizing audit standards, enhancing audit inspections, and strengthening enforcement of PCAOB rules and standards and other related laws and rules. People are at the heart of our mission at the PCAOB. As we carry out that mission, we strive to uphold the highest standards in audit quality with investors&rsquo; families, savings, and futures in mind.
 
 
 We are hiring mission-driven professionals interested in a career with purpose, competitive benefit offerings, and work-life flexibility. If you are interested in working with a group of talented professionals to protect investors and drive audit quality and innovation while adhering to the highest standards of ethical and professional conduct, join us.
 
 
 
 What We Offer
 
 
 
 At the PCAOB, we offer a highly competitive compensation and benefits package with a focus on the health and financial well-being of our valued team members. Some of the features of our comprehensive Total Rewards package include:
 
 
 <ul>
 <li>
 Compensation &ndash; We support transparency, equity, and fairness in our compensation programs and provide a reasonable estimate of the salary range, based on data-driven market analysis, for each job posting. While it is not typical for an individual to be hired at or near the top of the range, a reasonable estimate of the salary range for this role in Washington, DC (Headquarters) or New York, NY is $248,100/year - $400,000/year. Team members may also be eligible for performance-based discretionary awards.
 </li>
 <li>
 Hybrid work option &ndash; Staff will be assigned to the Washington, DC (Headquarters) or New York, NY office.
 </li>
 <li>
 Generous paid time off &ndash; Up to 6 weeks annually, in addition to 12 federal holidays, and 2 floating holidays and a year-end break December 28 &ndash; 31, 2026.
 </li>
 <li>
 Highly competitive 401(k) match and savings options &ndash; Immediate vesting and contributions matched dollar for dollar, up to 7 percent of eligible compensation. Roth in-plan conversion available.
 </li>
 <li>
 Comprehensive and competitive health benefit offerings &ndash; Medical, dental, and vision plans
 </li>
 <li>
 Supportive paid family leave benefits &ndash; Up to 16 weeks paid parental leave and up to 16 weeks paid caregiver leave
 </li>
 <li>
 Life insurance benefits &ndash; Basic life and AD&amp;D insurance provided; supplemental insurance also available
 </li>
 <li>
 Education benefits &ndash; PCAOB staff qualify for the Public Service Loan Forgiveness (PSLF) program. We also offer student loan repayment assistance, staff college tuition assistance, and college coach program support.
 </li>
 <li>
 Well-being and family resources &ndash; Mental health and well-being resources, paid volunteer time, emergency child/adult dependent back-up care services, family-forming assistance, discounted gym memberships, employee assistance program (EAP), health advocate program, and more
 </li>
 <li>
 Commuter benefits &ndash; Tax-free employer subsidy and pretax employee deductions
 
 
 </li>
 </ul>
 
 Position Summary
 
 
 
 The PCAOB has a full-time position for a Chief Information Security Officer (CISO) in the Office of Technology (OT). This role will be located at our Washington, DC (Headquarters) or New York, NY office and will report to the Chief Information Officer (CIO). The CISO will participate and contribute as an effective member of the PCAOB leadership team, working closely with and advising the CIO, PCAOB executive leadership, and Board on all matters related to the information security program and cybersecurity operations of the PCAOB. Additionally, he/she will be responsible for the implementation, optimization, and delivery of our comprehensive information security strategy aligning our data and technology standards to the security posture of the PCAOB. The CISO, in collaboration with business leaders, will guide and assist with the development and implementation of a security program, facilitate information security governance, advise the CIO on security direction and resource investments, and design and align appropriate policies with respect to information security. This role will continuously assess and develop the cybersecurity landscape, act as a change agent, and help to lead information security resilience across OT and the PCAOB, protecting all data and technology assets. This role will collaborate and interact with the Chief Risk Officer (CRO) and the Office of Enterprise Risk Management (OERM) on information security risk related topics.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Responsible for the strategic leadership, implementation, monitoring, reporting, and continuous improvement of the PCAOB's information security program.
 </li>
 <li>
 Work with PCAOB leadership, divisions, and offices to oversee and mature the operations of a PCAOB-wide information security organization with a common goal in information security and cybersecurity risk.
 </li>
 <li>
 Provide leadership and foster collaboration with risk, compliance, and legal teams and business stakeholders to ensure a secure approach to innovation and the application of artificial intelligence (A.I.).
 </li>
 <li>
 Provide leadership and promote automation for configuration and deployment in support of Security Operations (SecOps); manage institution-wide information security processes by leading OT information security staff to maintain an effective information security program and implement associated priorities.
 </li>
 <li>
 Lead efforts to continually assess, evaluate, and make recommendations to management regarding the adequacy of the IT general and security controls for the PCAOB and technology systems which requires a proactive, hands-on approach.
 </li>
 <li>
 Develop, implement, and administer technical cybersecurity standards, as well as the suite of security services and tools, and align to existing PCAOB policies, frameworks, and procedures.
 </li>
 <li>
 Design and implement a tactical structure to address Security Operations Center (SOC) structures to better enable outage notifications, security risks/threats, or elevation of incidents that occur within the PCAOB environment.
 </li>
 <li>
 Establish annual and long-range cybersecurity and compliance goals, align with data and technology strategies, create and monitor Key Performance Indicators (KPI), and forge a multi-year information security roadmap.
 </li>
 <li>
 Proactively identify, assess, and prioritize IT risks to data and systems in coordination with OT portfolio management and OERM including internal/external threats, cyber-crimes, and vendor/third-party risks; partner with OERM or relevant stakeholders on the appropriate courses of action to mitigate or eliminate risk.
 </li>
 <li>
 Lead a technical team to proactively work with business units across the PCAOB to implement practices and ensure implementation of technological controls that meet agreed-on policies and standards for information security.
 </li>
 <li>
 Lead the development and implementation of effective frameworks, relevant policies, processes, and practices to secure protected and sensitive data in accordance with the PCAOB&rsquo;s Information Sensitivity Classification ensuring compliance with relevant legislation and legal interpretation.
 </li>
 <li>
 Collaborate and coordinate with the CRO to identify, evaluate, and report on OERM organizational-level risk reports to the Board in areas such as legal and regulatory, IT, and cybersecurity risk, while supporting and advancing business objectives.
 </li>
 <li>
 Provide leadership supporting a team to streamline and maintain a modern compliance model for cybersecurity safeguards, including access controls, MFA, encryption, asset classification, change management, patch management, network segmentation, firewalls, detection technologies including network and endpoint security, insider threat protection, logging and network monitoring, and vulnerability management.
 </li>
 <li>
 Conduct and support regular internal and external security assessments, tabletop exercises, penetration tests, playbook development, and red/purple team exercises to proactively test the effectiveness of security controls including OT Security Program Assessments and corrective action plans.
 </li>
 <li>
 Keep abreast of security incidents and act as primary control point during significant information security incidents; convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidences that arise. This may require availability off hours, as applicable.
 </li>
 <li>
 Mature education and awareness programs and advise PCAOB leadership at all levels on security issues, best practices, and vulnerabilities.
 </li>
 <li>
 Examine impacts of new technologies on the PCAOB's overall information security; establish processes to review implementation of new technologies to ensure security compliance.
 </li>
 <li>
 Perform the full range of supervisory duties, including resource allocation plans, evaluating employee performance; making recommendations for appointment and promotion; hearing and resolving complaints; identifying development and training needs of employees; other related supervisory tasks.
 </li>
 <li>
 Other duties as assigned.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 Education/Technical Expertise
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree or equivalent experience in information technology, engineering, computer science, cybersecurity, or related field.
 </li>
 <li>
 Minimum of 15+ years experience in cybersecurity with 5+ years in progressive leadership roles.
 </li>
 <li>
 Minimum of 7+ years experience directly supporting reference architectures around Microsoft Technology environments.
 </li>
 <li>
 Minimum of 5+ years Agile experience managing Scrum/Kanban teams and Agile methodologies/ceremonies.
 </li>
 <li>
 Minimum of 5+ years experience with cloud computing/elastic computing across virtualized environments.
 </li>
 <li>
 Working knowledge of Data Loss Prevention (DLP) programs and best practices, including expertise in securing large, unstructured, and rapidly evolving data sets.
 </li>
 <li>
 Hands-on experience implementing NIST, ISO, SOX, PCI, or other frameworks.
 </li>
 <li>
 Working knowledge of security architectures and compliance best practices with Microsoft Azure, Cloud Access Security Brokers (CASB), and Zero-trust environments.
 </li>
 <li>
 Experience with contract and vendor negotiations and management including managed services.
 </li>
 <li>
 Experience in planning, organizing, and developing IT security system technologies.
 </li>
 <li>
 Ability to explain information security, cyber security, and data privacy issues and programs to non-technical and non-expert audiences.
 </li>
 <li>
 Proven ability to develop, coach, and mentor staff, providing constant feedback and clear direction.
 </li>
 <li>
 Proven record of strategic planning, functional transformation experience, and conflict management.
 </li>
 <li>
 A self-starter able to administer several open, ongoing assignments at any one time, where some assignments are routinely unstructured, requiring autonomy and independent judgment.
 </li>
 <li>
 In-depth experience successfully harmonizing diverse and competing interests.
 </li>
 <li>
 Ability to clearly articulate a position with sound logic, supporting empirical evidence, and impartiality.
 </li>
 <li>
 Ability to effectively represent the organization to a variety of both internal and external constituencies, deconstruct complex challenges, and translate business needs into technology solutions.
 </li>
 <li>
 Occasional travel to the PCAOB&rsquo;s regional offices.
 </li>
 <li>
 Superior verbal and written communication skills.
 </li>
 <li>
 Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 CISM, CISSP, CRISC or other relevant certification.
 
 
 </li>
 </ul>
 
 Leadership/Management Skills And Abilities
 
 
 
 <ul>
 <li>
 Ability to work in matrixed environments
 </li>
 <li>
 Ability to work in Agile operating frameworks
 </li>
 <li>
 Ability to flourish in environments of change to advance continuous improvement
 </li>
 <li>
 Ability to drive a positive &ldquo;tone at the top&rdquo; of the organization and hold others accountable for doing the same.
 </li>
 <li>
 Ensures that own behavior and the behavior of others is consistent with the highest ethical standards and aligns with the values of the organization.
 </li>
 <li>
 Must be able to motivate and inspire employees at all levels of the organization in order to enhance team commitment and individual performance.
 </li>
 <li>
 Proven ability to develop, coach, and mentor staff, providing constant feedback and clear direction.
 </li>
 <li>
 Ability to promote collaboration by unifying teams, setting common goals and incentivizing collaborative behavior.
 </li>
 <li>
 Demonstrated success in establishing and maintaining positive working relationships with others, both internally and externally, to achieve the goals of the organization.
 </li>
 <li>
 Strong ability to build credibility, organize effectively, solve problems quickly and communicate clearly.
 </li>
 <li>
 Possesses the balance and emotional intelligence required to meet the diverse needs of the divisions/offices.
 </li>
 <li>
 Proven ability to navigate and resolve various types of conflict in a timely and productive manner.
 
 
 </li>
 </ul>
 
 Equal Employment Opportunity
 
 
 
 All PCAOB employees are entitled to equal opportunity and a professional work environment, free of discrimination and harassment. A workplace free of discrimination and harassment is fundamental to professional success and to the PCAOB's mission. The PCAOB will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law.
</div>

Chief Information Security Officer

DriveWealth

<div>
 
 About Us
 
 
 DriveWealth is on a mission to make investing easier. We believe that everyone should have the ability to control their financial future, and that access to financial markets should not be limited by geography, wealth, or legacy systems. We are a global B2B financial technology organization dedicated to democratizing access to financial independence around the world. Our mission is realized through an API-based platform, empowering our partners to offer seamless investing and trading experiences to clients worldwide, all from their mobile devices. Our technology provides partners with a modern, extensible toolkit, enabling traditional investment workflows and innovative techniques like fractional share ownership. DriveWealth has evolved into a global platform offering trading of US equities, mutual funds, ETFs, fixed income, and options.
 
 
 There&rsquo;s never been a better time to build a category-defining business and there has rarely been a team better positioned for this opportunity. Our culture blends the pace and agility of a fintech start-up with the impact, stability, and discipline of Wall Street. We encourage creativity and experimentation while ensuring institutional-grade execution and regulatory compliance in everything we do. Join us and help build the future of global investing!
 
 
 
 About the Role
 
 
 
 As Chief Information Security Officer, you will be responsible for leading and strengthening the company&rsquo;s entire security function across four key domains: Governance, Risk &amp; Compliance (GRC), Offensive Security (Red Team), Defensive Security (Blue Team), and Security Engineering &amp; Architecture. You will take charge of strategy, improve processes, manage budgets, and build out teams to support ambitious growth goals. The CISO will also represent security to senior leadership and the board, ensuring the organization is compliant with industry standards and ready for regulatory scrutiny.
 
 
 
 What You&rsquo;ll Do
 
 
 <ul>
 <li>
 Oversee and enhance policy frameworks and regulatory compliance programs (e.g., SOC, ISO27001, GDPR)
 </li>
 <li>
 Conduct and improve security monitoring, incident response, and threat hunting functions
 </li>
 <li>
 Direct penetration testing and vendor management activities
 </li>
 <li>
 Lead the engineering of secure network and identity management systems in the cloud
 </li>
 <li>
 Build, mentor, and expand a skilled security team across underdeveloped areas (especially GRC and Blue Team)
 </li>
 <li>
 Engage with industry forums, prepare audit and compliance reports, and present to company leadership
 </li>
 <li>
 Drive readiness for public company listing and support ongoing business growth
 </li>
 </ul>
 
 
 What You&rsquo;ll Need
 
 
 <ul>
 <li>
 Strong experience in regulated industries (preferably fintech; healthcare also considered)
 </li>
 <li>
 Deep knowledge of cloud-first and zero-trust security models
 </li>
 <li>
 Proven track record in building full-scale security programs for public or pre-IPO companies
 </li>
 <li>
 Hands-on leadership with the ability to develop and expand high-performing teams
 </li>
 <li>
 Expertise in standards compliance, including SOC, ISO27001, and GDPR
 </li>
 <li>
 Experience presenting security strategy to executive and board-level leadership
 </li>
 <li>
 Familiarity with security certifications and regulatory forums (e.g., FINRA, ISAC)
 </li>
 <li>
 Ability to manage budgets and vendor relationships in a dynamic environment
 </li>
 </ul>
 
 CompensationCompensation package offerings are based on candidate experience and technical qualifications, as it relates to the role. These are identified and determined throughout your interviewing experience.Please note: this role is expected to come into our office on a cadence set by the Hiring Manager/Team.
 
 
 New York, NY (Hybrid) Pay Range: $300,000 USD - $400,000 USD
 
 
 Working at DriveWealth
 
 
 We do our best work when we&rsquo;re in the same room. To maintain the speed our partners expect, our New York and Chicago teams work in-office 4 days a week. We&rsquo;ve found that being physically side-by-side is the only way to solve complex problems in real-time and stay truly accountable to the products we ship. When you&rsquo;re here, you&rsquo;re working directly with the people making the decisions.&nbsp;To support that work, we provide competitive compensation, equity, and a 401(k) match. We also offer full insurance coverage, a wellness reimbursement, a company-provided phone, and a personal development allowance. Finally, we value the time you spend away from the office with generous PTO, observed holidays, and extended leave.
 
 Work Authorization
 
 Applicants must possess the legal right to work in the country where the position is located at the time of application. DriveWealth requires all employees to provide original documentation verifying their work authorization on or before their first day of employment.
 
 
 For US-based roles: Applicants must be currently authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship. DriveWealth does not provide visa sponsorship or support for employment authorization, including transfers, at this time. Offers of employment are strictly contingent upon an individual&rsquo;s ability to secure and maintain the legal right to work at the Company.
 
 
 How We Think About AI
 
 
 We leverage AI to work smarter and move faster. We seek AI-curious talent who are proactive about using emerging tools to increase signal quality, reduce friction, and improve outcomes to deliver products faster, provide better service to our partners, and to streamline processes. Your ability to leverage our internal tools and technology to drive results is as important to us as your core domain expertise.
 
 
 Compensation
 
 
 Pay is generally based on the level, complexity, responsibility, location, and job duties/requirements of the specific position. We then source candidates with the requisite skills, expertise, education, training, and experience.&nbsp; If you are selected for an interview, please feel welcome to speak to a recruiter about our compensation philosophy and other available benefits. This role is eligible for base, bonus, equity, 401(k) match, and heavily subsidized benefits and perks.
 
 
 Equal Employment Opportunity
 
 
 To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply.&nbsp;
 
 
 Agency Disclaimer
 
 
 DriveWealth does not accept agency resumes. Do not forward resumes to our jobs alias, employees, or any other organization location. DriveWealth is not responsible for any fees related to unsolicited resumes.
 
</div>

Massachusetts Institute of Technology

<div>
 Posting Description
 
 
 
 CHIEF INFORMATION SECURITY OFFICER (CISO)
 
 , Information Systems and Technology (IS&amp;T) , establishes and leads the enterprise-wide information security strategy across MIT. The CISO leads other overall direction and implementation of the information security policies, programs, and procedures to protect information security assets. The CISO positions the information security teams to provide an efficient, effective, and up-to-date risk management environment in support of IS&amp;T&rsquo;s goals. The position is responsible for developing, maintaining, and enforcing enterprise IT security architecture, security standards, and guidelines encompassing information security.
 
 
 
 The Full Job Description Is Available Here .
 
 
 
 Job Requirements
 
 
 REQUIRED : Bachelor&rsquo;s degree; a minimum of fifteen years of experience in cybersecurity, information security, information technology or another related field; a minimum of five years of experience in a senior leadership role; a minimum of ten years of experience managing teams; demonstrated experience designing and managing enterprise-wide security programs, policies, and risk mitigation and initiatives; demonstrated expertise in compliance, data privacy laws, risk management, incident response, and security frameworks; and demonstrated experience with security architecture and enterprise technology. PREFERRED : Master&rsquo;s degree; experience in a higher education environment.
 
 
 This is a full-time hybrid position.
 
 
 4/27/2026
</div>

Chief Information Security Officer (CISO)

TotalShield Cybersecurity & Risk Solutions

Job Title: Chief Information Security Officer (CISO)About the OpportunityTotalShield Cybersecurity &amp; Risk Solutions is seeking a visionary and experienced Chief Information Security Officer (CISO) to lead our cybersecurity strategy, risk governance, and enterprise security operations across Kuwait and the wider GCC region.This is a high-impact executive role for a leader who thrives in building secure digital environments, managing enterprise risk, and guiding organizations through complex cyber threats.If you are passionate about cybersecurity leadership, strategic risk management, and protecting critical infrastructure &mdash; this role offers strong career growth, regional influence, and executive-level responsibility.What We Offer<ul><li>Competitive executive-level compensation package</li><li>Strategic leadership role with regional impact</li><li>Opportunity to build and lead a modern cybersecurity program</li><li>Exposure to enterprise, government, and critical infrastructure clients</li><li>Fast-growing environment with leadership autonomy</li></ul>Key Responsibilities<ul><li>Develop and execute enterprise-wide cybersecurity strategy and roadmap</li><li>Lead Security Operations Center (SOC), incident response, and threat intelligence functions</li><li>Establish governance, risk, and compliance (GRC) frameworks</li><li>Oversee cybersecurity architecture, cloud security, and infrastructure protection</li><li>Manage enterprise risk assessments and regulatory compliance (local and international standards)</li><li>Lead incident response planning and breach management</li><li>Advise executive leadership on cyber risk posture and mitigation strategies</li><li>Build and mentor high-performing cybersecurity teams</li><li>Coordinate with external auditors, regulators, and strategic partners</li><li>Ensure continuous improvement of security posture across all systems</li></ul>Candidate Profile<ul><li>Proven experience in senior cybersecurity leadership roles (CISO, Head of Security, Director-level)</li><li>Strong background in cybersecurity frameworks (ISO 27001, NIST, etc.)</li><li>Experience in SOC operations, risk management, and enterprise security architecture</li><li>Strong leadership, communication, and stakeholder management skills</li><li>Experience in government, enterprise, or regulated industries is highly preferred</li><li>Ability to operate in fast-paced, high-security environments</li></ul>Why Join UsAt TotalShield, you will shape the cybersecurity direction of a growing regional organization. This role offers executive influence, high visibility, and the opportunity to build security programs from the ground up while working with advanced technologies and enterprise clients.Call to ActionIf you are ready to take on a strategic leadership role in cybersecurity and make a regional impact, we encourage you to apply today. Join us in building secure digital futures across Kuwait and the GCC.Job Type: Full-timePay: KD4,000.000 - KD7,000.000 per monthWork Location: In person

EMIRAGE Crafts Inc.

Chief Information Security Officer (CISO) &mdash; Job DescriptionSummary Lead the organization&rsquo;s information security and risk‑management strategy to protect data, systems, and operations while enabling business objectives.Key responsibilities<ul><li>Develop and execute a comprehensive information security strategy aligned with business goals and risk appetite.</li><li>Own governance, risk, and compliance (GRC): establish security policies, standards, and controls; oversee risk assessments and remediation plans.</li><li>Lead security operations: threat detection, monitoring, incident response, forensics, and vulnerability management.</li><li>Build and manage a security program covering application, cloud, infrastructure, identity, endpoint, and data protection.</li><li>Oversee identity and access management, privileged access controls, MFA, and least‑privilege enforcement.</li><li>Manage security architecture and tooling (SIEM, EDR, DLP, WAF, CASB, IAM, vulnerability scanners) and ensure secure design of systems and integrations.</li><li>Coordinate security for cloud platforms (AWS/Azure/GCP), SaaS, and on‑prem environments including IaC security and cloud posture management.</li><li>Lead third‑party/vendor security assessments, contractual security controls, and supply‑chain risk management.</li><li>Drive secure development practices: threat modeling, SAST/DAST, code review, dependency scanning, and DevSecOps integration.</li><li>Oversee data protection, encryption, key management, and privacy‑by‑design practices in collaboration with legal/privacy teams.</li><li>Manage incident response plan, runbooks, tabletop exercises, and post‑incident reviews; report major incidents to executives and board.</li><li>Maintain compliance with relevant standards and regulations (ISO 27001, SOC 2, PCI‑DSS, HIPAA, GDPR) and lead audits and attestations.</li><li>Develop security awareness and training programs for all employees; foster a risk‑aware culture.</li><li>Recruit, mentor, and develop security team members and coordinate cross‑functional security initiatives.</li><li>Report security metrics and risk posture to the executive team and board; advise on security implications of strategic initiatives.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field; advanced degree preferred.</li><li>10+ years of progressive security experience with several years in senior leadership/management roles.</li><li>Deep technical knowledge across cloud security, network/security architecture, identity, application security, and incident response.</li><li>Proven experience with security frameworks and compliance regimes (ISO 27001, SOC 2, NIST, PCI, HIPAA, GDPR).</li><li>Strong business acumen and ability to translate technical risk into business impact for executives and board members.</li><li>Excellent communication, stakeholder management, and crisis‑management skills.</li></ul>Preferred skills<ul><li>Certifications such as CISSP, CISM, CCSP, or similar.</li><li>Experience securing cloud‑native architectures, DevSecOps practices, and modern SaaS environments.</li><li>Background in conducting security due diligence for M&amp;A and managing security as part of product development.</li><li>Familiarity with privacy regulations and working with legal/compliance teams.</li></ul>Job Types: Full-time, PermanentPay: QAR314.16 - QAR1,223.34 per hourWork Location: On the road

Search 10000+ Information security officer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 information security officer jobs Near Me

Information Security Officer

Information Security Officer

Chief Information Security Officer

Chief Information Security Officer

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)