Chief Information Security Officer

The Security Executive Council; Chicago (IL); On-site; USD 150,000 - 250,000; Full time

Benefits offered by this job

Base salary

Incentive bonus opportunities

Medical, dental, vision options

401(k) plan

Job summary

The Security Executive Council is seeking a Chief Information Security Officer (CISO) in Chicago, Illinois. The CISO leads the information security strategy, ensuring the protection of sensitive data and compliance with regulatory standards.

This role involves advising senior management, overseeing security infrastructure, and addressing emerging cybersecurity threats. The position is ideal for someone with extensive experience in IT risk management and a strong leadership background.

Qualifications

• 10+ years of experience in information security or IT risk management.
• At least 5 years in a senior leadership role.
• Proven track record managing enterprise-level cybersecurity programs.

Responsibilities

• Develop and maintain an enterprise-wide information security strategy.
• Advise senior management on cybersecurity risks and compliance.
• Oversee the design and implementation of security infrastructure.
• Monitor emerging threats and develop partnerships for security.
• Conduct regular audits and risk assessments.

Skills

Cybersecurity frameworks (NIST, ISO 27001, COBIT)

Analytical skills

Problem-solving

Leadership abilities

Cloud security

Incident response

Education

Bachelor’s degree in Computer Science or related field (Master’s preferred)

Industry certifications (CISSP, CISM, CISA, CRISC)

Job description

Job Summary

Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise’s vision, strategy, and program to ensure information assets and technologies are adequately protected. The CISO is a key leadership role tasked with safeguarding sensitive data, mitigating risks, ensuring compliance, and responding effectively to cybersecurity incidents.

Key Responsibilities

Strategic Leadership

• Develop, implement, and maintain an enterprise-wide information security strategy and roadmap.
• Advise senior management and the Board of Directors on cybersecurity risks, compliance, and emerging threats.
• Align security initiatives with business objectives to support growth while managing risk.

Risk Management and Compliance

• Identify, assess, and prioritize cybersecurity risks and establish measures to mitigate them.
• Ensure compliance with relevant legal, regulatory, and contractual requirements (e.g., GDPR, HIPAA, CCPA, ISO 27001).
• Develop and enforce company-wide security policies, procedures, and standards.

Cybersecurity Operations

• Oversee the design, implementation, and maintenance of security infrastructure, including firewalls, intrusion detection systems, and encryption technologies.
• Lead the development of incident response plans and oversee their execution in case of security breaches.
• Conduct regular audits, risk assessments, and penetration testing to ensure system integrity.

Emerging Threats and Innovation

• Monitor the threat landscape and emerging technologies to proactively address vulnerabilities.
• Develop partnerships with industry groups, government agencies, and vendors to stay ahead of cybersecurity trends.
• Oversee security for cloud infrastructure, DevSecOps, and third-party vendors.

Qualifications

Education & Certifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field (Master’s preferred).
• Industry certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.

Experience

• 10+ years of experience in information security, IT risk management, or related fields, with at least 5 years in a senior leadership role.
• Proven track record of managing enterprise-level cybersecurity programs.

Skills & Competencies

• Deep understanding of cybersecurity frameworks (e.g., NIST, ISO 27001, COBIT).
• Strong analytical, problem‑solving, and decision‑making skills.
• Excellent leadership, communication, and collaboration abilities.
• Experience in incident response, cloud security, and data protection strategies.

Key Performance Indicators (KPIs)

• Reduction in security incidents and breaches.
• Compliance with regulatory and internal security standards.
• Employee cybersecurity awareness scores.
• Incident response times and recovery rates.

Compensation

We offer an attractive compensation and benefits package, including base salary, incentive bonus opportunities, and benefits such as medical, dental, vision options and 401(k) plan.