Chief Information Security Officer

The Security Executive Council; Jacksonville (FL); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401(k) with company match

Employer paid life insurance and AD&D

Employer paid disability

Wellness program

Adoption assistance

Tuition assistance

Employee assistance program

Work life balance

Paid time off (PTO), sick leave and...

Job summary

The Security Executive Council is seeking a Chief Information Security Officer to guide the organization's data security program, align it with business goals, and drive a resilience-first strategy across the enterprise. You will spearhead strategy, risk assessments, policy development, incident response, and disaster recovery while ensuring regulatory compliance and a security-focused culture.

The role requires strong leadership, strategic planning, and the ability to balance security

Qualifications

• Extensive experience in information security, risk management, and IT governance.
• Experience with network segmentation, resilient backup strategies, and security culture transformation.
• Knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO27001).
• Strong leadership, communication, and strategic planning skills.
• Ability to balance security priorities with business objectives.

Responsibilities

• Lead information security strategy and policy development.
• Develop and implement a comprehensive information security strategy aligned with business goals.
• Create, maintain, and enforce security policies, standards, and procedures.
• Conduct enterprise-wide risk assessments and prioritize security initiatives by risk exposure.
• Ensure compliance with applicable laws, regulations, and industry standards (GDPR, HIPAA, PCI DSS).
• Oversee secure IT architecture and network infrastructure design and implementation.
• Monitor threat intelligence and respond to emerging cybersecurity threats.
• Manage security operations, including incident detection, response, and recovery.
• Implement Zero Trust principles across network and remote access.
• Lead and mentor security teams, including security analysts, engineers, and incident responders.
• Coordinate with other executives to foster a security-aware culture.
• Lead incident response and disaster recovery planning to minimize business disruption.
• Establish and oversee incident response plans for cyber-attacks or data breaches.
• Coordinate disaster recovery and business continuity planning related to information security.
• Manage budgets for security initiatives and justify investments in technology and personnel.
• Evaluate new security technologies to enhance organizational security posture.

Skills

Information security

Risk management

IT governance

Leadership

Strategic planning

Communication

Cybersecurity frameworks

Job description

About the job

TOGETHER, WE SAVE LIVES

Summary

The Chief Information Security Officer oversees planning and implementation of the organization’s data security programs. This includes strategy development, risk assessments and mitigation efforts and associated processes, and compliance with relevant laws and regulations. The CISO reports into the CFO as part of the team’s senior leadership team. The role serves as the technical subject matter expert and authoritative voice for all cybersecurity and data protection initiatives across the organization. The CISO will drive a resilience-first approach, emphasizing prevention, rapid detection/response, and business-aligned recovery.

Key Responsibilities

• InformationSecurityStrategyandPolicyDevelopment
• Developandimplementacomprehensiveinformationsecuritystrategyalignedwithbusinessgoals
• Create,maintain,andenforcesecuritypolicies,standards,andprocedures
• RiskManagementandCompliance
• Conductenterprise-wide risk assessments and prioritize security initiatives based on risk exposure.
• Ensurecompliancewithapplicablelaws,regulations,andindustrystandards(e.g.,GDPR,HIPAA,PCIDSS)
• SecurityArchitectureandOperations
• OverseethedesignandimplementationofsecureITarchitectureandnetworkinfrastructure
• Monitorthreatintelligenceandrespondtoemergingcybersecuritythreats
• Managesecurityoperations,includingincidentdetection,response,andrecovery
• Implement Zero Trust principles across network and remote access
• LeadershipandTeamManagement
• Leadandmentorsecurityteams,includingsecurityanalysts,engineers,andincidentresponders
• Collaboratewithotherexecutivesanddepartmentstofosterasecurity-awareculture
• Lead incident response and disaster recovery planning to ensure minimal business disruption
• IncidentResponseandDisasterRecovery
• Establishandoverseeincidentresponseplansforpotentialcyber-attacksordatabreaches
• Coordinatedisasterrecoveryandbusinesscontinuityplanningrelatedtoinformationsecurity
• BudgetingandResourcePlanning
• Managebudgetsforsecurityinitiativesandjustifyinvestmentsintechnologyandpersonnel
• Evaluatenewsecuritytechnologiestoenhanceorganizationalsecurityposture

Qualifications:

• Extensiveexperienceininformationsecurity,riskmanagement,andITgovernance
• Experience with network segmentation, resilient backup strategies, and security culture transformation
• Knowledgeofcybersecurityframeworksandstandards(e.g.,NIST,ISO27001)
• Strongleadership,communication,andstrategicplanningskills
• Abilitytobalancesecurityprioritieswithbusinessobjectives

Compensation:

Eligible Employees Are Offered

• Medical, dental & vision insurance
• 401(k) with company match
• Employer paid life insurance and AD&D
• Employer paid disability
• Wellness program
• Adoption assistance
• Tuition assistance
• Employee assistance programli>Work life balance
• Paid time off (PTO), sick leave and paid holidays throughout the calendar year (consistent with relevant state law and company policies)

We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation.