CISO & Enterprise Security Leader: Strategy, Risk, Growth

Confidential; United States; Hybrid; USD 200,000 - 320,000; Full time

Job summary

Confidential is seeking a Vice President & Chief Information Security Officer (CISO) to lead enterprise information security strategy and operations across a regulated clinical environment. The role reports to the CIO and focuses on protecting PHI/PII in a hybrid on-premises and Azure/M365 environment, maturing to a measurable, regulator-ready security program.

The CISO will own the security governance, incident response, and risk management, aligning investments to HIPAA/GDPR obligations and

Qualifications

• 12+ years of progressive information security experience.
• 5+ years leading an enterprise security function (CISO, deputy CISO, or security director).
• Active senior security certification such as CISSP or CISM.

Responsibilities

• Own and mature the enterprise information security strategy, operating model, and multi-year roadmap.
• Build and lead the information security organization—security engineering, operations, governance, and risk.
• Direct security operations, monitoring, detection, and 24/7 alerting with defined MTTD/MTTR targets.
• Lead enterprise incident response end-to-end and coordinate with counsel, cyber-insurance, forensics, and regulators.
• Enforce identity/access management, endpoint/MDM, network, and data-protection controls across hybrid on-premises and Azure/M365 environment.
• Oversee governance, risk, and compliance with SLAs and evidence; ensure controls are provable.
• Protect PHI/PII and large datasets, collaborating on data governance and guardrails.
• Report posture and risk to CIO/CEO/board with clear metrics and drive security awareness.

Skills

Security leadership

Enterprise security

HIPAA/GDPR awareness

Executive communication

Education

Bachelor’s degree in CS/Info Security

Master’s degree (preferred)

Job description

Confidential is seeking a Vice President & Chief Information Security Officer (CISO) to lead enterprise information security strategy and operations across a regulated clinical environment. The role reports to the CIO and focuses on protecting PHI/PII in a hybrid on-premises and Azure/M365 environment, maturing to a measurable, regulator-ready security program.

The CISO will own the security governance, incident response, and risk management, aligning investments to HIPAA/GDPR obligations and