Chief Information Security Officer (CISO)

TheHiveCareers; United States; Remote; USD 180,000 - 280,000; Full time

Job summary

TheHiveCareers is seeking a Chief Information Security Officer (CISO) to lead the organization's cybersecurity strategy and protect critical assets. You will guide governance, risk management, and regulatory compliance while enabling secure business growth and digital transformation.

In this executive role, you will oversee security architecture, SOC operations, IAM, third-party security, and incident response, partnering with legal and audit teams to ensure robust controls and resilience.

Qualifications

• Bachelor's or Master's degree in cybersecurity, IT, or related field.
• 15–20+ years in cybersecurity/IT security roles.
• 5+ years in senior leadership roles (CISO, Head of Security, etc.).
• Strong expertise in security architecture, risk management, and compliance.
• Certifications preferred (CISSP, CISM, CRISC).

Responsibilities

• Define and execute enterprise-wide cybersecurity strategy aligned with business objectives.
• Advise CEO, Board, and executive leadership on cyber risks and mitigation strategies.
• Build a security-first culture across the organization.
• Oversee security architecture across networks, applications, cloud, and endpoints.
• Ensure implementation of security controls, monitoring, and threat detection.
• Lead SOC and incident response capabilities.
• Establish cybersecurity risk management frameworks and policies.
• Conduct risk assessments, vulnerability management, and penetration testing.
• Align with ISO/IEC 27001, NIST, and CIS Controls.
• Ensure compliance with GDPR, HIPAA, PCI-DSS, and local cybersecurity laws.
• Manage audits, certifications, and regulatory reporting.
• Partner with legal, compliance, and audit teams.
• Lead incident response planning, crisis management, and breach handling.
• Ensure business continuity and disaster recovery readiness.
• Conduct simulations and tabletop exercises.
• Oversee identity governance, access controls, and privileged access management.

Skills

Leadership

Strategic thinking

Crisis management

Stakeholder influence

Regulatory knowledge

Education

Bachelor's or Master's in Cybersecurity

CISSP

CISM

CRISC

15–20+ years in cybersecurity/IT security

5+ years in senior leadership roles

Job description

Job Title: Chief Information Security Officer (CISO)Role SummaryThe CISO is responsible for establishing and leading the organization's cybersecurity strategy, protecting information assets, systems, and infrastructure from evolving threats. This role ensures robust security governance, risk management, and regulatory compliance while enabling secure business growth and digital transformation.

Key Responsibilities

1. Cybersecurity Strategy & Leadership

• Define and execute enterprise-wide cybersecurity strategy aligned with business objectives
• Advise CEO, Board, and executive leadership on cyber risks and mitigation strategies
• Build a security-first culture across the organization

2. Security Architecture & Operations

• Oversee security architecture across networks, applications, cloud, and endpoints
• Ensure implementation of security controls, monitoring, and threat detection
• Lead Security Operations Center (SOC) and incident response capabilities

3. Risk Management & Governance

• Establish cybersecurity risk management frameworks and policies
• Conduct risk assessments, vulnerability management, and penetration testing
• Align with standards such as ISO/IEC 27001, NIST, and CIS Controls

4. Compliance & Regulatory Oversight

• Ensure compliance with regulations such as GDPR, HIPAA, PCI-DSS, and local cybersecurity laws
• Manage audits, certifications, and regulatory reporting
• Partner with legal, compliance, and audit teams

5. Incident Response & Resilience

• Lead incident response planning, crisis management, and breach handling
• Ensure business continuity and disaster recovery readiness
• Conduct simulations and tabletop exercises

6. Identity & Access Management (IAM)

• Oversee identity governance, access controls, and privileged access management
• Ensure secure authentication and authorization mechanisms

7. Third-Party & Cloud Security

• Manage vendor and third-party risk assessments
• Ensure security across cloud platforms and outsourced services
• Establish secure DevSecOps practices

8. Security Awareness & Training

• Develop organization-wide security awareness programs
• Train employees on cyber risks, phishing, and best practices

Qualifications & Experience

• Bachelor's or Master's degree in Cybersecurity, IT, Computer Science, or related field
• 15–20+ years of experience in cybersecurity or IT security roles
• 5+ years in senior leadership roles (CISO, Head of Security, etc.)
• Strong expertise in security architecture, risk management, and compliance
• Professional certifications preferred (CISSP, CISM, CRISC, etc.)

Key Competencies

• Deep cybersecurity and risk management expertise
• Strategic thinking and business alignment
• Crisis management and decision-making under pressureStrong leadership and stakeholder influence
• Regulatory and compliance knowledge