Chief Information Security Officer

Socket.dev; Cleveland (OH); On-site; USD 170,000 - 250,000; Full time

Benefits offered by this job

Medical & Dental Plans

Life Insurance for you and family

401k Savings Plans

Paid Time Off

Job summary

AmTrust Financial Services in the United States seeks a Chief Information Security Officer to lead the enterprise cybersecurity and information risk management strategy, enabling business growth and regulatory compliance. You will serve as trusted advisor to the Board, overseeing governance, cyber defense, privacy collaboration, and operational resilience across all business units.

The role requires a strong track record in leading security operations, incident response, and risk management,

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations, including incident response, threat management, security monitoring, and cyber resilience capabilities.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.
• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.
• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.
• Preferred: CISSP, CISM, CISA, CRISC, CCSP certifications.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.
• Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements
• Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.
• Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.
• Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.
• Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.
• Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.
• Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

Skills

Executive leadership

Information security

Threat intelligence

Incident response

Regulatory compliance

Budget management

Security architecture

Education

Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or related discipline

Job description

Overview

The Chief Information Security Officer (CISO) is responsible for establishing, executing, and continuously evolving the enterprise cybersecurity and information risk management strategy. The CISO provides executive leadership for the protection of customer, policyholder, employee, and corporate information assets while enabling business growth, innovation, digital transformation, and regulatory compliance.

The CISO serves as a trusted advisor to executive leadership and the Board of Directors, ensuring cybersecurity risks are effectively identified, managed, communicated, and aligned with the organization's strategic objectives. The role oversees enterprise security governance, cyber defense, privacy collaboration, operational resilience, and regulatory readiness across all business units.

Responsibilities

• Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.


• Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements


• Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.


• Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.


• Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.


• Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.


• Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.


• Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.


• Minimum 15 years of progressive information security and technology leadership experience.


• Minimum 8 years of executive-level cybersecurity leadership experience.


• Proven success leading and maturing security operations functions, including incident response, threat management, security monitoring, and cyber resilience capabilities.


• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.


• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.


• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.


• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.


• Preferred: Professional certifications such as: CISSP, CISM, CISA, CRISC, CCSP

What We Offer

• AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include: Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.


• AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.


• AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.