Chief Information Security Officer

CyberJobs.Com; Downers Grove (IL); On-site; USD 130,000 - 216,000; Full time

Job summary

Kemper is a leading insurer delivering enterprise cybersecurity programs across identity security, GRC, SOC, vulnerability management, and data protection. The role requires expert delivery in Agile/SAFe environments with cross-team coordination and executive-style communication.

You will lead governance, risk, and vendor collaborations while aligning security with business priorities and regulatory demands. Eligible for annual discretionary bonus and comprehensive benefits.

Qualifications

• 10+ years of progressive technology/security program delivery experience.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, Risk Management, or related discipline.
• Hands-on experience in Agile/SAFe environments with Program Increment planning and cross-team coordination.
• Experience delivering complex security programs with regulatory or audit implications.
• Ability to translate security issues into business impact and communicate with executives.

Responsibilities

• Direct end-to-end delivery of enterprise cybersecurity programs.
• Develop and manage integrated Agile/SAFe delivery plans and manage dependencies.
• Identify and resolve security, technical, regulatory, and operational risks.
• Establish governance forums, decision rights, and executive reporting.
• Translate between engineers, risk teams, vendors, and business leaders.
• Lead vendor delivery, milestones, readiness, and transition.
• Drive continuous improvement in security delivery practices.

Skills

Cybersecurity program delivery

Agile/SAFe

Executive communication

Vendor management

Risk management

Cross-team coordination

Education

Bachelor's degree in Cybersecurity/CS/IS/Engineering

Equivalent professional experience

Tools

SAFe tooling

GRC tools

Cloud security tools

Job description

Location(s)

P&C-Butterfield Road-Downers Grove-IL-AAC

Details

Kemper is one of the nation’s leading specialized insurers. Our success is a direct reflection of the talented and diverse people who make a positive difference in the lives of our customers every day. We believe a high-performing culture, valuable opportunities for personal development and professional challenge, and a healthy work-life balance can be highly motivating and productive. Kemper’s products and services are making a real difference to our customers, who have unique and evolving needs. By joining our team, you are helping to provide an experience to our stakeholders that delivers on our promises.

Position Responsibilities

• Direct end-to-end delivery of enterprise cybersecurity programs such as identity security, GRC, SOC, vulnerability/exposure management, application security, cloud security, and data protection initiatives.
• Develop and manage integrated Agile/SAFe delivery plans that connect architecture, engineering, control, testing, change, vendor, and operational-readiness activities; manage cross-team dependencies, Program Increment commitments, milestones, and readiness criteria rather than treating the program as a schedule-only exercise.
• Identify and drive resolution of security, technical, control, regulatory, resource, and operational dependencies; elevate material risks with clear decision options.
• Establish and operate governance forums, decision rights, Agile/SAFe ceremonies, risk/issue management, financial controls, delivery metrics, and executive reporting appropriate to Director-level accountability.
• Translate between engineers, security specialists, risk and control teams, vendors, and business leaders to maintain technically accurate decisions and commitments.
• Lead vendor delivery, implementation milestones, readiness, cutover, transition, and operational acceptance in partnership with Procurement and technology owners.
• Drive continuous improvement in security delivery practices, portfolio transparency, and benefits realization.

Position Qualifications

• 10+ years of progressive technology/security program delivery experience, including substantial experience leading complex cybersecurity or highly technical risk programs at enterprise scale and demonstrated delivery within Agile/SAFe environments. Equivalent depth of experience will be considered.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, Business, Risk Management, or a related discipline, or equivalent relevant professional experience.
• Deep working knowledge of multiple cybersecurity domains and the technical dependencies that shape security implementations.
• Required hands-on experience operating in Agile/SAFe environments, including Program Increment planning, backlog and dependency management, Agile ceremonies, cross-team coordination, delivery metrics, and iterative value delivery.
• Demonstrated delivery of complex security or highly technical risk programs.
• Strong knowledge of cybersecurity risk, security control objectives, technology implementation risk, and control-readiness concepts.
• Experience managing programs with regulatory, audit, control, or operational-resilience implications.
• Strong command of program/project governance, integrated planning, dependency management, RAID management, financial tracking, vendor management, change management, testing, and operational transition.
• Understanding of common security frameworks and control environments sufficient to manage security program dependencies and evidence requirements.
• Ability to translate technical security conditions into business impact, risk decisions, priorities, and executive-level communications.
• Director-level ownership, judgment, and accountability for outcomes.
• Ability to lead through Agile/SAFe ways of working, including servant leadership, facilitation of cross-team commitments, iterative delivery, and transparent management of dependencies and impediments.
• Executive communication and concise risk framing.
• Independent influence across technical, business, risk, and vendor stakeholders.
• Structured decision-making, negotiation, conflict resolution, and clarity in ambiguous multi-team programs.

Preferred Qualifications

• Prior leadership of major IAM, PAM, SOC, GRC, vulnerability/exposure, cloud security, application security, or data-protection transformations.
• PMP or comparable program/project management credential. Advanced SAFe certifications (for example, SAFe Agilist, Release Train Engineer, Lean Portfolio Management, or equivalent) are preferred; practical Agile/SAFe delivery experience is required.
• CISSP, CISM, CRISC, or comparable security/risk credential.
• Master's degree in cybersecurity, technology management, business, or a related field; experience in regulated enterprises with executive governance, audit, or regulatory commitments.

The range for this position is $129,500 to $215,700. When determining candidate offers, we consider experience, skills, education, certifications, and geographic location among other factors.

This job is eligible for an annual discretionary bonus and Kemper benefits (Medical, Dental, Vision, PTO, 401k, etc.).

Kemper is proud to be an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, disability status or any other status protected by the laws or regulations in the locations where we operate. We are committed to supporting diversity and equality across our organization and we work diligently to maintain a workplace free from discrimination. Kemper is focused on expanding our Diversity, Equity and Inclusion efforts to align with our vision, mission, and guiding principles.

Kemper does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Kemper and Kemper will not be obligated to pay a placement fee.

Kemper will never request personal information, such as your social security number or banking information, via text or email. Additionally, Kemper does not use external messaging applications like WireApp or Skype to communicate with candidates. If you receive such a message, delete it.