Chief Information Security Officer

Job Title:

Chief Information Security Officer (CISO)

Location:

On-site – Greater Phoenix Area, AZ

Job Type:

Full Time

Compensation:

$250,000 - $300,000

Benefits:

The position is eligible for medical, dental, vision, and life insurance coverage, \& PTO

Chief Information Security Officer (CISO)

Our client is seeking an experienced

Chief Information Security Officer (CISO)

to lead enterprise-wide cybersecurity strategy, governance, risk, and compliance initiatives. This executive leadership role will partner closely with IT, Legal, Compliance, and executive leadership to strengthen the organization's security posture while ensuring alignment with regulatory requirements and industry best practices.

Responsibilities

Information Security Governance

• Lead and continuously improve the organization's cybersecurity governance program and supporting security management processes.
• Develop and mature security programs aligned with industry frameworks such as NIST CSF, ISO 27001, SOC 2, and applicable privacy regulations.
• Partner with Legal, Compliance, and business stakeholders to ensure security obligations, contractual requirements, and regulatory expectations are met.
• Evaluate existing security documentation, identify gaps, and drive continuous process improvements.

Cyber Risk Management

• Develop, implement, and maintain enterprise information security policies, standards, and procedures.
• Establish executive-level reporting through KPIs, KRIs, dashboards, and risk metrics that provide meaningful insight into the organization's cyber risk posture.
• Assess organizational cyber risk and recommend strategies that reduce business risk while supporting operational objectives.

Compliance \& Security Awareness

• Lead enterprise security compliance initiatives and remediation efforts.
• Collaborate across IT and business teams to validate the effectiveness of security controls and supporting documentation.
• Oversee security awareness and phishing education programs to strengthen employee cybersecurity practices.

Third-Party Risk Management

• Direct third-party cybersecurity risk management and vendor security assessment programs.
• Evaluate security controls for vendors, cloud providers, and strategic business partners.
• Partner with cross-functional stakeholders to support vendor risk management, privacy initiatives, and contractual security requirements.

Qualifications

• 15\+ years of progressive cybersecurity experience.
• 10\+ years leading enterprise security, governance, risk, and compliance (GRC), or comparable cybersecurity functions.
• Demonstrated success developing and executing enterprise cybersecurity strategies and programs.
• Deep understanding of cybersecurity governance, enterprise risk management, compliance, and third-party risk management.
• Experience implementing or managing security frameworks such as NIST, ISO 27001, ITIL, and SOC 2\.
• Excellent executive communication, presentation, and stakeholder management skills.
• Experience supporting privacy and regulatory requirements such as GDPR, HIPAA, HITRUST, or similar frameworks is a plus.
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent professional experience).
• CISSP, CRISC, CISA, or comparable cybersecurity certification preferred.
• Proven leadership experience managing enterprise security teams, strategic initiatives, vendors, and cross-functional partnerships.

Preferred Experience

• Experience leading cybersecurity programs within highly regulated industries.
• Demonstrated success partnering with executive leadership on cybersecurity strategy, governance, and enterprise risk management.
• Experience supporting security certifications, regulatory assessments, and external audits.