Chief Information Security Officer

AmTrust Financial Services, Inc.; Cleveland (OH); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical & Dental Plans

Life Insurance (including dependents)

Health Care Flexible Spending

Dependent Care

401k Savings Plans

Paid Time Off

Job summary

AmTrust Financial Services, Inc. is seeking a Chief Information Security Officer to lead enterprise cybersecurity and information risk management strategy, enabling growth and regulatory compliance.

The CISO will advise the Board, oversee security governance, cyber defense, privacy collaboration, and incident response while partnering with leaders to secure infrastructure, cloud environments, and third parties. A minimum of 15 years in information security leadership is expected.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations functions.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response.
• Deep understanding of enterprise security architecture, cloud security, IAM, app security, data protection, and regulatory compliance.
• Strong executive presence with the ability to communicate complex security risks to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing teams.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives.
• Continuously assess and optimize the cybersecurity organization’s structure, capabilities, and resource allocation.
• Oversee planning, execution, and performance tracking of the enterprise cybersecurity portfolio.
• Lead security operations capabilities including monitoring, threat intelligence, detection, incident response, and recovery.
• Lead the organization’s response to cybersecurity incidents with containment and communication.
• Partner with business and technology leaders to remediate risks across infrastructure, cloud, and third parties.
• Advise executive leadership and the Board on cybersecurity risks, threats, and investments.
• Promote a culture of security awareness and regulatory compliance.

Skills

Cybersecurity leadership

Executive communication

Security governance

Cloud security

Incident response

Education

Bachelor's degree in IT/CS/Engineering/Cybersecurity

Tools

Security architectures

IAM

Job description

The Chief Information Security Officer (CISO) is responsible for establishing, executing, and continuously evolving the enterprise cybersecurity and information risk management strategy. The CISO provides executive leadership for the protection of customer, policyholder, employee, and corporate information assets while enabling business growth, innovation, digital transformation, and regulatory compliance.

The CISO serves as a trusted advisor to executive leadership and the Board of Directors, ensuring cybersecurity risks are effectively identified, managed, communicated, and aligned with the organization's strategic objectives. The role oversees enterprise security governance, cyber defense, privacy collaboration, operational resilience, and regulatory readiness across all business units.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.
• Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements
• Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.
• Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.
• Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.
• Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.
• Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.
• Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations functions, including incident response, threat management, security monitoring, and cyber resilience capabilities.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.
• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.
• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.

Preferred

• Professional certifications such as: CISSP, CISM, CISA, CRISC, CCSP

What We Offer

• Medical & Dental Plans
• Life Insurance, including eligible spouses & children
• Health Care Flexible Spending
• Dependent Care
• 401k Savings Plans
• Paid Time Off

AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.

AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.