Chief Information Security Officer

Deluxe Corporation; Atlanta (GA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Healthcare

PTO & Holidays

401(k) match

ESOP / Stock Purchase Plan

Disability insurance

Infertility & Adoption Support

Tuition Reimbursement

Job summary

Deluxe Corporation is seeking a Chief Information Security Officer to establish and mature a global information security program that protects company and customer data while meeting audit and security requirements. You will lead cross‑functional teams, align with regulatory standards, and report to executive leadership and the board on risk and strategy.

The role emphasizes building proactive controls, staying ahead of cyber trends, and guiding technology modernization efforts in a complex

Qualifications

• Bachelor’s degree or higher with at least 10 years in information security leadership.
• Experience managing regulatory and compliance policies.
• Experience developing information security goals, objectives, and metrics.

Responsibilities

• Develop and implement a world‑class Information Security program across AppSec, InfoSec, and CorpSec to protect customer information and regulatory expectations.
• Partner with technology and business leaders to implement proactive security controls and limit risk.
• Build and grow security teams with external perspectives and diverse talent strategies.
• Ensure compliance with SOC 1/SOC 2, NIST, ISO 27001, PCI, HIPAA, CCPA, CSA, CFPB, FFIEC and related laws.
• Provide regular reporting on information security risk to executive teams and the board.

Skills

InfoSec governance

Regulatory compliance

Threat modeling

Executive communication

Education

Bachelor’s degree

Master’s degree

Tools

NIST 800-53

ISO 27001

PCI DSS

Job description

Why Join Us

Be part of an organization that’s driving change and consistently recognized as a top employer. At Deluxe, we know that great people build great companies—and we invest in you accordingly. We’re proud to be recognized as a Great Place to Work and a top workplace for Moms, Dads, LGBTQ+ employees, and Veterans. We offer competitive benefits starting on day one, designed to support your life both in and out of work. 42% of our employees have stayed for 10+ years, citing our people, benefits, work‑life balance, inclusive culture, and team support as key reasons why. Customers entrust Deluxe with some of their most valuable financial data, and as such, security is of utmost importance. The key responsibility of the role is establishing and maintaining a global information security program to adequately protect company and customer information assets and to meet Audit and client security requirements, and proactively creating prevention programs from attackers. The CISO will build upon the existing security frameworks in connection with the emerging cyber industry trends, and mature the program as the company advances its technology modernization efforts and contends with an increasingly complex threat environment and regulatory landscape.

Job Functions

Continually evolve and implement world class Information Security program across AppSec, InfoSec, and CorpSec to protect Customer Information, Regulatory and Compliance expectations, and protecting company and customers assets from external Attackers. Partner with technology and business leaders across the company to develop and implement sufficient proactive controls to limit the risk of internal or external attacks. Build, leverage and grow world‑class security teams by continually bringing External Perspectives from various Industry and Regulatory Security Forums, and with thoughtful intention towards diversity and inclusion. Develop and build talent necessary to bring innovative solution. Talent strategy includes evaluating current teams, putting together strategies and plans to train, upskill existing teams as well as bring in new talent, building a talent bench strength through dynamic succession plans with focused talent development and career pathing. In partnership with Chief Compliance Office, evolve and ensure ongoing company compliance including exposure to controls around the Service Organization Control 1 and 2 (SOC 1 /SOC 2), NIST 800‑30, ISO 27001, Payment Card Industry Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Cloud Security Alliance (CSA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institution Examinations Council (FFIEC) and various other laws and regulations including Executive Orders. Work directly with the Revenue Business Units to facilitate Information Security and availability risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk. Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company and client needs compliance and regulatory requirements. Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program. Interact with the Board of Directors, Executive Leadership Team, Risk & Compliance and Privacy teams, as well as Clients and Prospects as required. Oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices. Serves as process owner of ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information, in compliance with the organizations information security policies.

Basic Qualifications: Education and Experience

• Bachelor’s and 10 years or Master’s and 8 years, 7 years of Management.
• Experience managing regulatory and compliance policies.
• Experience developing information security protection goals, objectives, and metrics consistent with corporate strategic plans.

Preferred Qualifications: Education

• Masters Degree in Computer Science or Information Technology

Preferred Qualifications: Experience

• 10 years in security frameworks and standards

Additional Basic Qualifications

• Must be 18 years of age or older

Benefits

In line with our commitment to employee wellbeing, our total rewards benefits package is designed to support the physical, financial, and emotional health of our employees, tailored to meet their unique and evolving needs. Our approach considers our employees’ whole selves, ensuring they can thrive both in and outside of work.

• Healthcare (Medical, Dental, Vision)
• Paid Time Off, Volunteer Time Off, and Holidays
• Employer-Matched Retirement Plan
• Employee Stock Purchase Plan
• Short‑Term and Long‑Term Disability
• Infertility Treatment, Adoption and Surrogacy Assistance
• Tuition Reimbursement

These benefits are designed to enhance the health, protect the financial security, and provide peace of mind to our employees and their families.

Deluxe Corporation is an Equal Employment Opportunity employer: All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, disability, sex, age, ethnic or national origin, marital status, sexual orientation, gender identity or presentation, pregnancy, genetics, veteran status or any other status protected by state or federal law.

Please view the electronic EEO is the Law Poster which serves to inform you of your equal employment opportunity protections as part of the application process.

Reasonable Accommodation for Job Seekers with a Disability: If you require reasonable accommodation in completing this application, interviewing, completing any pre‑employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [e-mail].