Chief Information Security Officer

Confidential; United States; À distance; USD 260 000 - 520 000; Plein temps

Résumé du poste

Confidential Executive Search is seeking a seasoned Chief Information Security Officer to lead security, risk, product security, and corporate IT for a global software company. You will protect data, strengthen cloud security, and guide teams in safe GenAI adoption.

The role requires executive collaboration with engineering, product, and board leadership, translating risk into clear business decisions and implementing pragmatic controls across environments.

Qualifications

• 12+ years in cybersecurity and risk management with executive leadership experience.
• Experience leading security across product, cloud, and corporate IT environments.
• Proven ability to translate risk into business decisions and practical controls.

Responsabilités

• Lead Secure GenAI adoption with guardrails for data, IP, access, and third-party AI services.
• Oversee product/application security, secure SDLC, API security, and automated testing.
• Develop AI security governance aligned with frameworks and regulatory requirements.
• Establish vendor security assessments and ongoing third-party risk management.
• Direct global IT operations, endpoint/security controls, and business continuity planning.
• Communicate security priorities and risk to executives and the board.

Connaissances

Executive leadership

CISO experience

Cloud security

DevSecOps

Governance & risk

Board communication

Security architecture

Zero trust

Formation

Bachelor’s or Master’s in CS/IT/Cybersecurity

Outils

AWS

GCP

Description du poste

Chief Information Security Officer (CISO)

Confidential Executive Search

A global enterprise software company is seeking a Chief Information Security Officer to lead its security, risk management, product security, and corporate IT functions.

This role combines executive leadership with deep technical judgment. You will protect sensitive customer and business data, strengthen security across cloud-based products, and help teams adopt Generative AI safely and effectively.

We are looking for a security leader who partners closely with engineering and business teams, translates risk into clear business decisions, and builds practical controls that support innovation.

What you’ll lead

• Secure GenAI adoption: Partner across engineering and business functions to enable commercial and open-source AI tools. Establish guardrails for sensitive data, intellectual property, access, and third-party AI services.
• Product and application security: Embed threat modeling, secure development practices, and automated security testing into the software development lifecycle and CI/CD pipelines. Oversee API security, penetration testing, and remediation across production applications.
• AI security and governance: Address risks including data leakage, adversarial attacks, and model exploitation. Develop governance aligned with relevant AI frameworks and regulatory requirements.
• Third-party risk management: Establish security assessment standards, vendor risk scoring, and ongoing monitoring for software providers, service partners, and contractors.
• Corporate IT and infrastructure: Lead global IT operations, endpoint and network security, business applications, and infrastructure resilience. Own business continuity and disaster recovery planning for corporate IT.
• Executive and board engagement: Communicate security priorities, emerging risks, investment needs, and progress to senior leadership and the board. Support enterprise customer security discussions.

What you’ll bring

• 12+ years of progressive cybersecurity and risk management experience, including at least five years in a CISO, CSO, VP of Security, or equivalent executive leadership role within B2B SaaS, fintech, or AI technology.
• Demonstrated accountability for both security teams and corporate IT or infrastructure operations.
• A strong record of leading application security, DevSecOps, and secure software development for cloud-based products operating at scale.
• Practical experience enabling GenAI or LLM adoption through security architecture, governance, and operational controls.
• Experience building and managing third-party risk management programs.
• Strong knowledge of AWS and/or GCP environments, zero-trust architecture, NIST, ISO 27001, SOC standards, and OWASP guidance, including security risks associated with LLM applications.
• Experience advising executives, presenting to boards or board committees, and engaging enterprise customers.
• CISSP or CISM certification.
• A bachelor’s or master’s degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.

AI governance or secure software lifecycle credentials, such as AIGP or CSSLP, are additional advantages.

Compensation and working arrangements

The role offers an executive compensation package comprising base salary, bonus, and equity, with remote-first working arrangements.

About the search

This is a confidential executive search. Company details and further information about the opportunity will be shared during initial recruiter discussions.