CISO

Cyberjobs; United States; Remote; USD 180,000 - 280,000; Full time

Job summary

SecurityWeek is seeking a Chief Information Security Officer (CISO) to lead and strengthen the company's information security program. This hands-on leadership role will set security priorities, advise executive leadership, and collaborate with editorial, events, sales, marketing, and operations teams to embed safeguards into daily operations.

The CISO will manage risk in a fast-moving media and events environment while ensuring reliable publishing and event delivery, protection of editoral

Qualifications

• Significant experience leading information security, cybersecurity, or risk programs.
• Experience protecting cloud services, SaaS, websites, and sensitive data.
• Ability to explain security risks and tradeoffs to executives and nontechnical colleagues.
• Experience developing security policies and controls that work across business and technical teams.

Responsibilities

• Develop and maintain a company-wide information security strategy, risk program, policies, and standards suited to the organization's size and operations.
• Assess security risks across business systems, cloud services, endpoints, networks, websites, and third-party platforms; prioritize remediation with system owners.
• Strengthen identity and access management, including MFA, least-privilege access, and account lifecycle controls.
• Oversee security monitoring, vulnerability management, patching, endpoint protection, secure configuration, backups, and recovery planning.
• Protect editorial systems and workflows, including CMS, newsroom accounts, unpublished material, and sensitive communications.
• Safeguard data across registration, CRM, marketing, analytics, payment, webinar, and event platforms.
• Lead incident preparedness and response, coordinating investigation, containment, recovery, and communications.
• Maintain business continuity and recovery plans for essential services including publishing and events.
• Evaluate security and privacy risks in vendors and partners; address contractual, data protection, and security requirements.
• Advise leadership on legal, regulatory, privacy, and contractual obligations, and on security investments and risk acceptance.
• Build security awareness through training and exercises tailored to employees' roles.
• Track and report meaningful security measures, risks, incidents, and remediation progress to executives.
• Support customer and partner security reviews and assurance requests.

Skills

Leadership in information security

IAM / ID management

Incident response

Vulnerability management

Data protection

Business continuity

Vendor risk management

Executive communication

Security strategy

Job description

Chief Information Security Officer (CISO)

SecurityWeek is a cybersecurity news and events business serving security professionals and industry leaders. Its work spans digital publishing, newsletters, conferences, webinars, sponsorship programs, audience operations, and related business systems.

The CISO role

SecurityWeek is seeking a Chief Information Security Officer (CISO) to lead and strengthen the company's information security program. The CISO will help protect company systems, editorial operations, and the information entrusted to SecurityWeek by readers, event attendees, sponsors, employees, and partners.

This is a hands-on leadership role. The CISO will set security priorities, advise executive leadership, and work with editorial, events, sales, marketing, and operations teams to build practical safeguards into day-to-day work. The right candidate can manage risk in a fast-moving media and events environment while supporting reliable publishing and event delivery.

Responsibilities

• Develop and maintain a company-wide information security strategy, risk program, policies, and standards suited to the organization's size and operations.
• Assess security risks across business systems, cloud services, endpoints, networks, websites, and third-party platforms; prioritize remediation with system owners.
• Strengthen identity and access management, including multifactor authentication, least-privilege access, account lifecycle controls, and privileged access practices.
• Oversee security monitoring, vulnerability management, patching, endpoint protection, secure configuration, backups, and recovery planning.
• Protect editorial systems and workflows, including the content management system, newsroom accounts, unpublished material, and sensitive communications.
• Safeguard audience, attendee, sponsor, employee, and business data across registration, CRM, marketing, analytics, payment, webinar, and event platforms.
• Establish clear controls for data access, use, retention, deletion, and sharing. Support consent-based handling of event data, including badge scans and sponsor lead delivery.
• Lead incident preparedness and response, coordinating technical investigation, containment, recovery, internal communications, and external notifications as appropriate.
• Maintain business continuity and recovery plans for essential services, including publishing, event registration, and in-person and virtual event operations.
• Evaluate security and privacy risks in vendors and business partners; help teams address relevant contractual, data protection, and security requirements.
• Advise leadership on applicable legal, regulatory, privacy, and contractual obligations, and on security investments and risk acceptance.
• Build security awareness across the company through practical training, guidance, and exercises tailored to employees' roles.
• Track and report meaningful security measures, risks, incidents, and remediation progress to executive leadership.
• Support customer and partner security reviews, questionnaires, and assurance requests.

Qualifications

• Significant experience leading information security, cybersecurity, or risk programs, with a record of setting priorities and delivering practical improvements.
• Experience protecting a mix of cloud services, SaaS platforms, websites, business applications, endpoints, and sensitive data.
• Strong knowledge of security principles and practices covering identity and access management, incident response, vulnerability management, data protection, business continuity, and third-party risk.
• Experience developing security policies and controls that work across business and technical teams.
• Clear communication skills, including the ability to explain security risks and tradeoffs to executives and nontechnical colleagues.
• Sound judgment in balancing security needs with business continuity, editorial deadlines, customer experience, and event operations.
• Ability to lead through influence and coordinate effectively with internal teams, service providers, and technical partners.

Preferred qualifications

• Experience in media, publishing, events, marketing technology, or another business that handles substantial audience or customer data.
• Familiarity with privacy requirements and security obligations relevant to digital publishing, email marketing, conferences, and online registration.
• Experience preparing for or managing security incidents involving ransomware, account compromise, website disruption, or third-party service outages.
• Relevant professional certifications or equivalent practical experience.

What success looks like

The CISO will give leadership a clear view of the company's most important security risks, improve protection of critical systems and sensitive data, and help teams respond effectively when issues arise. Success means security practices are understood and used across the business, event and publishing operations are better prepared for disruption, and security supports the trust SecurityWeek has with its readers, attendees, sponsors, and partners.