Chief Information Security Officer

Thrive; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Comprehensive Benefits Package

Smart and Diverse Environment

401K and Company Match

A Learning Company

Paid Annual Leave and Holidays

Annual Company Events

Flexible Schedules

New Employee Referral Program

Job summary

Thrive is seeking a seasoned Information Security leader to serve as vCISO for Service clients. You will craft risk-based security programs aligned to business needs, establish governance and compliance, and act as the trusted advisor to senior IT and executive teams.

You will develop annual strategic plans, coordinate with internal IT, and lead remediation and risk assessment activities. Strong mentoring and policy development skills are essential.

Qualifications

• Bachelor's degree or equivalent in cybersecurity or related field
• CISSP/CISM certifications are preferred or in scope

Responsibilities

• Assess client Information Security Programs and develop risk-based, business-aligned strategies
• Ensure Governance, Regulatory and Compliance obligations are addressed from an IS perspective
• Serve as Information Security SME for Executive leadership
• Develop annual strategic plans and project roadmaps
• Collaborate with internal IT to execute the security plan
• Create remediation plans for security assessments
• Conduct annual risk assessments
• Coordinate Penetration Tests with third parties
• Collaborate with customers on policy development and implementation
• Assist with Security Incident Response and tabletop exercises
• Mentor client technical resources
• Perform assessments across Information Security Strategy, Governance, Program Development/Management, and Risk Management

Skills

Information Security

Governance

Risk Management

Risk Assessments

Incident Response

Policy Development

Project Roadmaps

Client Mentoring

Executive Communication

Education

Bachelor's degree in cybersecurity

MBA preferred

Tools

CISSP

CISM

Job description

• Work with Thrive's vCISO Service clients to assess their current Information Security Program and develop an appropriate, business aligned strategy to establish a proactive approach to cyber risk management. Implement customized, risk-based Information Security Programs and the associated controls frameworks to complement each client's business and IT operations
• Ensure all Governance, Regulatory and Compliance obligations are addressed from an Information Security perspective. Be a trusted advisor and "go-to" resource for Senior IT and Executive Leadership for all things relating to Information Security
• Serve as Information Security Subject Matter Expert for Executive leadership
• Develop annual strategic plans and supporting project roadmaps
• Collaborate and coordinate with internal IT resources to execute the security plan
• Create remediation plans for all security assessments
• Conduct annual risk assessments
• Coordinate Penetration Tests with third parties
• Collaborate with customers on policy development and implementation
• Assist with Security Incident Response and tabletop exercises
• Mentor client technical resources as requested
• Performs assessments with clients in the following areas:
• Information Security Strategy
• Information Security Governance
• Information Security Program Development and Management
• Information Security Risk Management

Benefits

• Comprehensive Benefits Package
• Smart and Diverse Environment
• 401K and Company Match
• A Learning Company
• Paid Annual Leave and Holidays
• Annual Company Events
• Flexible Schedules
• New Employee Referral Program

Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM)Expert in security frameworks such as CIS, NIST, CMMC, HIPAA/HITECH, PCI-DSS, ISO 27001/2Bachelor's Degree or equivalent work experience in cybersecurity (MBA preferred)5+ years' experience Information Security Preferred