Chief Information Security Officer

Deluxe Corporation; Atlanta, Northern (GA, KY); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Healthcare

PTO

Retirement plan

Stock purchase plan

Disability insurance

Infertility support

Tuition reimbursement

Job summary

Deluxe Corporation is seeking a Chief Information Security Officer to lead the global information security program, protect customer data, and align security with business strategy amid a complex regulatory landscape. You will build world-class security teams, drive risk management across IT and line-of-business units, and report to the board on security posture and strategic risk exposure.

In this role you will evolve security controls across AppSec, InfoSec and CorpSec, ensure SOC 1/2 and

Qualifications

• Bachelor’s degree and 10+ years or Master’s degree and 8+ years, including 7+ years in management.
• Experience managing regulatory and compliance policies.
• Experience developing information security protection goals, objectives, and metrics aligned with strategic plans.

Responsibilities

• Evolve and implement information security program across AppSec, InfoSec, and CorpSec to protect customer information and comply with regulatory expectations.
• Build and grow world-class security teams with external perspectives and diverse talent.
• Ensure ongoing compliance including SOC 1/2, NIST 800-30, ISO 27001, PCI, HIPAA, CCPA, CSA, CFPB, FFIEC, and other laws.
• Collaborate with Revenue units to assess information security and availability risk across the enterprise.
• Report on the status of the information security program to risk teams, senior leaders and the board as part of enterprise risk management.
• Oversee technology risk management and safeguard availability, integrity, and confidentiality of data.

Skills

Security leadership

Regulatory compliance

Risk management

SOC 1 / SOC 2

Education

Master's in CS/IT

Job description

Why Join Us

Be part of an organization that’s driving change and consistently recognized as a top employer. At Deluxe, we know that great people build great companies—and we invest in you accordingly.

• We’re proud to be recognized as a Great Place to Work and a top workplace for Moms, Dads, LGBTQ+ employees, and Veterans.
• We offer competitive benefits starting on day one, designed to support your life both in and out of work.
• 42% of our employees have stayed for 10+ years, citing our people, benefits, work-life balance, inclusive culture, and team support as key reasons why.

Customers entrust Deluxe with some of their most valuable financial data, and as such, security is of utmost importance.The key responsibility of the role is establishing and maintaining a global information security program to adequately protect company and customer information assets and to meet Audit and client security requirements, and proactively creating prevention programs from attackers.

The CISO will build upon the existing security frameworks in connection with the emerging cyber industry trends, and mature the program as the company advances its technology modernization efforts and contends with an increasingly complex threat environment and regulatory landscape.

Job Functions:

• Continually evolve and implement world class Information Security program across AppSec, InfoSec, and CorpSec to protect Customer Information, Regulatory and Compliance expectations, and protecting company and customers assets from external Attackers. Partner with technology and business leaders across the company to develop and implement sufficient proactive controls to limit the risk of internal or external attacks.
• Build, leverage and grow world-class security teams by continually bringing External Perspectives from various Industry and Regulatory Security Forums, and with thoughtful intention towards diversity and inclusion. Develop and build talent necessary to bring innovative solution. Talent strategy includes evaluating current teams, putting together strategies and plans to train, upskill existing teams as well as bring in new talent, building a talent bench strength through dynamic succession plans with focused talent development and career pathing.
• In partnership with Chief Compliance Office, evolve and ensure ongoing company compliance including exposure to controls around the Service Organization Control 1 and 2 (SOC 1 /SOC 2), NIST 800-30, ISO 27001, Payment Card Industry Security Standards (PCI), Health Insurance Portability and Accountability Act (HIPAA), California Consumer Privacy Act (CCPA), Cloud Security Alliance (CSA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institution Examinations Council (FFIEC) and various other laws and regulations including Executive Orders.
• Work directly with the Revenue Business Units to facilitate Information Security and availability risk assessment and risk management processes and works with stakeholders throughout the enterprise on identifying acceptable levels of residual risk.
• Responsible for identifying, evaluating and reporting on information security risks in a manner that meets company and client needs compliance and regulatory requirements. Provide regular reporting on the current status of the information security program to enterprise risk teams, senior business leaders and the board of directors as part of a strategic enterprise risk management program. Interact with the Board of Directors, Executive Leadership Team, Risk & Compliance and Privacy teams, as well as Clients and Prospects as required.
• Oversees all technology risk management activities and acts as an advocate for all information security and business continuance best practices. Serves as process owner of ongoing activities related to the availability, integrity and confidentiality of customers, business partners, employees and business information, in compliance with the organizations information security policies.

Basic Qualifications:

• Education and Experience: Bachelor’s and 10 years or Master’s and 8 years, 7 years of Management.
• Experience managing regulatory and compliance policies.
• Experience developing information security protection goals, objectives, and metrics consistent with corporate strategic plans.

Preferred Qualifications:

Education: Masters Degree in Computer Science or Information Technology

Experience: 10 years in security frameworks and standards

Additional Basic Qualifications:

Must be 18 years of age or older

Benefits

In line with our commitment to employee wellbeing, our total rewards benefits package is designed to support the physical, financial, and emotional health of our employees, tailored to meet their unique and evolving needs. Our approach considers our employees’ whole selves, ensuring they can thrive both in and outside of work. Here are some of the benefits we offer, which may vary based on role, location, or hours worked:

• Healthcare (Medical, Dental, Vision)
• Paid Time Off, Volunteer Time Off, and Holidays
• Employer-Matched Retirement Plan
• Employee Stock Purchase Plan
• Short-Term and Long-Term Disability
• Infertility Treatment, Adoption and Surrogacy Assistance
• Tuition Reimbursement

These benefits are designed to enhance the health, protect the financial security, and provide peace of mind to our employees and their families.

Deluxe Corporation is an Equal Employment Opportunity employer:

All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, disability, sex, age, ethnic or national origin, marital status, sexual orientation, gender identity or presentation, pregnancy, genetics, veteran status or any other status protected by state or federal law.

Please view the electronic EEO is the Law Poster which serves to inform you of your equal employment opportunity protections as part of the application process.

Reasonable Accommodation for Job Seekers with a Disability:

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to [e-mail].