Chief Information Security Officer

Nova Infra Invest; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Nova Infra Invest is seeking a full-time remote Chief Information Security Officer to lead the company’s information security strategy and operations. The role oversees policy design, controls, risk assessments, audits, and continuity planning, aligning security with business goals.

You will manage security vendors and tools, drive incident detection and response, and promote security awareness across distributed teams while reporting to senior leadership.

Qualifications

• Experience in Information Security Management with governance and risk practices.
• Strong cybersecurity background including threat detection, vulnerability mgmt, incident response.
• Knowledge of application security and secure software development practices.
• Experience in business continuity and disaster recovery planning.
• Familiarity with security standards (ISO 27001, NIST, CIS) and regulatory compliance.
• Proven leadership, cross-functional collaboration, and stakeholder influence.
• Clear written and verbal communication for non-technical audiences.

Responsibilities

• Lead information security strategy and operations for the organization.
• Assess security risks, coordinate audits, monitor threat landscapes.
• Direct incident detection, response, and recovery activities.
• Partner with business and technology leaders to align cybersecurity with objectives.
• Drive security awareness programs and manage vendors/tools.
• Prepare reports and briefings for senior leadership; support continuity planning.

Skills

Information Security Management

Policy development

Governance frameworks

Risk management practices

Cybersecurity

Threat detection

Vulnerability management

Incident response

Security operations

Application Security

Secure software development practices

Code review

Business continuity planning

Disaster recovery

Compliance knowledge (ISO 27001, NIST,

Education

Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field

Advanced degree or relevant certifications (CISSP, CISM, CISA)

Tools

Security vendors and tools

Job description

Role Description

This full-time remote Chief Information Security Officer (CISO) role is responsible for leading Nova Infra Invest’s information security strategy and operations. The CISO oversees the design, implementation, and continuous improvement of security policies, standards, and controls across all technology environments. Day-to-day responsibilities include assessing security risks, coordinating security audits, monitoring threat landscapes, and directing incident detection, response, and recovery activities. The role partners with business and technology leaders to align cybersecurity initiatives with organizational objectives, support secure application development, and ensure regulatory and contractual compliance. The CISO also leads security awareness programs, manages security vendors and tools, prepares reports and briefings for senior leadership, and drives business continuity and disaster recovery planning.

Qualifications

• Demonstrated expertise in Information Security Management and Information Security, including policy development, governance frameworks, and risk management practices.
• Strong background in Cybersecurity, with experience in threat detection, vulnerability management, incident response, and security operations.
• Knowledge of Application Security, including secure software development practices, code review, and application vulnerability remediation.
• Experience in Business Continuity planning and disaster recovery, ensuring resilience of critical systems and data.
• Proficiency with security standards and frameworks (e.g., ISO 27001, NIST, CIS), and relevant regulations or compliance requirements.
• Proven leadership skills, including managing cross-functional security teams and influencing stakeholders at all levels.
• Strong analytical, communication, and decision-making abilities, with the capacity to explain complex security topics to non-technical audiences.
• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; advanced degree or relevant certifications (e.g., CISSP, CISM, CISA) are beneficial.
• Experience in remote collaboration, using modern communication and project management tools to lead distributed teams effectively.