Chief Information Security Officer

Cyberjobs; Cleveland (OH); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical & Dental Plans

Life Insurance

401k Savings Plans

Paid Time Off

Health Care Flexible Spending

Dependent Care

Job summary

AmTrust Financial Services seeks a Chief Information Security Officer (CISO) to establish and evolve enterprise cybersecurity strategy and risk management. The CISO will lead governance, cyber defense, privacy collaboration, and regulatory readiness across units, reporting to executives and the Board.

Responsibilities include defining strategy, optimizing security operations, incident response, and partnering with leaders to manage threats in infrastructure, cloud, and third parties, while

Qualifications

• Experience leading and maturing security operations and incident response teams.
• Strong ability to communicate cybersecurity risks to executives and boards.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives.
• Assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation.
• Oversee enterprise cybersecurity portfolio planning, budgeting, and performance tracking.
• Build and mature security operations capabilities including monitoring, threat intel, detection, and resilience.
• Lead the organization’s response to cybersecurity incidents with containment and recovery.
• Partner with business leaders to identify and remediate security risks across infra, apps, cloud, and third parties.
• Advise executive leadership and the Board on cybersecurity risks and investments.
• Promote a culture of security awareness and regulatory compliance.

Tools

CISSP

CISM

CISA

CRISC

CCSP

Job description

Overview

The Chief Information Security Officer (CISO) is responsible for establishing, executing, and continuously evolving the enterprise cybersecurity and information risk management strategy. The CISO provides executive leadership for the protection of customer, policyholder, employee, and corporate information assets while enabling business growth, innovation, digital transformation, and regulatory compliance.

The CISO serves as a trusted advisor to executive leadership and the Board of Directors, ensuring cybersecurity risks are effectively identified, managed, communicated, and aligned with the organization's strategic objectives. The role oversees enterprise security governance, cyber defense, privacy collaboration, operational resilience, and regulatory readiness across all business units.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.
• Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements
• Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.
• Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.
• Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.
• Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.
• Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.
• Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations functions, including incident response, threat management, security monitoring, and cyber resilience capabilities.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.
• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.
• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.

Preferred:

• Professional certifications such as: CISSP, CISM, CISA, CRISC, CCSP

What We Offer

AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.

AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.

AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.