Duputy CISO

LevelUP HCS; New York (NY); Hybrid; USD 180,000 - 250,000; Full time

Job summary

Our Client seeks a Deputy Chief Information Security Officer to lead operational execution of the cybersecurity roadmap and drive security operations delivery.

Reporting to the CISO, you will oversee SOC, IAM, vulnerability management, and incident response, coordinating with MSSPs and internal teams to reduce risk and improve controls. This role is a hands-on, leadership-focused path toward future CISO responsibilities.

Qualifications

• 10+ years of cybersecurity experience with leadership in security operations or delivery.
• 5+ years managing or leading SOC, IAM, vulnerability management, incident response, or security engineering.
• Proven experience with MSSPs, outsourced SOC providers, or multi-vendor delivery models.
• Strong ability to translate cybersecurity issues into business priorities and recommendations.
• Experience supporting executive stakeholders and communicating operational progress.

Responsibilities

• Translate cybersecurity strategy into concrete implementation plans with milestones and deliverables.
• Lead day-to-day execution across SOC, IAM, vulnerability management, incident response, and security engineering.
• Oversee MSSP and SOC partners; manage incident workflows and service quality.
• Coordinate vulnerability remediation and identity management controls across environments.
• Drive operational readiness for terminal opening and cross-functional collaboration.

Skills

Leadership

Cybersecurity

Security operations

Vendor management

Communication

Tools

Microsoft security platforms

EDR

Job description

Deputy Chief Information Security Officer (Deputy CISO)

Operational Leadership | Cybersecurity Roadmap Execution | Security Operations

Company: Our Client

Location: New York, NY- Hybrid- Onsite 3 days a week- MUST BE LOCAL

Reports To: Chief Information Security Officer (CISO)

Position Summary

Our client is seeking a Deputy Chief Information Security Officer (Deputy CISO) to lead the operational execution of its cybersecurity roadmap and drive the delivery, effectiveness, and continuous improvement of security operations. This is a Junior CISO role. Looking for someone that is looking to become a CISO or that is a new CISO.

Reporting to the CISO, the Deputy CISO will lead the day-to-day execution of cybersecurity initiatives, oversee security operations functions, and coordinate delivery across managed security service providers (MSSPs), technology partners, and internal teams. This individual will ensure that cybersecurity priorities translate into measurable outcomes, operational readiness, and effective risk reduction.

This is a hands-on operational leadership role suited to an experienced cybersecurity professional who combines strong technical understanding with proven delivery management, partner oversight, and cross-functional leadership skills.

The successful candidate will work closely with the CISO to advance cybersecurity capabilities, strengthen operational controls, and support readiness for the opening and ongoing operation of a major airport terminal. The role also offers an opportunity to develop toward future CISO responsibilities through executive mentorship and expanded leadership exposure.

Key Responsibilities

Cybersecurity Roadmap Execution

• Translate cybersecurity strategy and priorities into actionable implementation plans with clear milestones, timelines, dependencies, and deliverables.
• Track progress against roadmap objectives, identify delivery blockers, and drive timely resolution of outstanding issues.
• Ensure cybersecurity initiatives produce measurable improvements in security posture and operational effectiveness.

Security Operations Leadership

• Coordinate day-to-day execution across Security Operations Center (SOC), identity and access management (IAM), vulnerability management, incident response, security engineering, network security, and data protection.
• Monitor the effectiveness of security operations and drive continuous improvement in processes, controls, and service delivery.
• Ensure security controls are implemented and operating effectively across infrastructure, endpoints, identity, cloud, applications, and relevant airport operational environments.

SOC, Monitoring, and Incident Response

• Oversee the operational performance of MSSP and SOC partners, including monitoring, detection, triage, escalation, incident workflows, and service quality.
• Lead operational coordination during cybersecurity incidents, bringing together internal teams and external partners to support investigation, containment, remediation, and recovery.
• Drive improvements in detection capabilities, incident response procedures, escalation protocols, and operational playbooks.

Vulnerability and Identity Management

• Coordinate vulnerability remediation and exposure reduction across infrastructure, IT operations, products and systems, digital platforms, data, and operational partners.
• Drive timely remediation of critical vulnerabilities, security findings, and control gaps.
• Oversee execution of identity security controls, including access lifecycle management, privileged access, access reviews, multifactor authentication (MFA), single sign-on (SSO), and conditional access.

Partner and Service Delivery Management

• Lead cybersecurity delivery through MSSPs, SOC providers, and other third-party security partners.
• Establish clear priorities, ownership, responsibilities, and deliverables across partner teams.
• Maximize the effective use of partner resources, resolve cross-functional dependencies, and ensure commitments are completed on time.
• Conduct operational reviews, manage escalations, and hold partners accountable for service quality and agreed outcomes.

Metrics, Reporting, and Executive Communication

• Maintain operational dashboards and reporting covering cybersecurity roadmap progress, service health, incident trends, vulnerability remediation, and control effectiveness.
• Provide the CISO with clear visibility into delivery status, operational challenges, emerging issues, and readiness risks.
• Communicate cybersecurity priorities, progress, and delivery risks in clear business terms to senior leadership and other stakeholders.
• Support executive and Board-level discussions by presenting delegated operational topics and explaining the business value of cybersecurity initiatives.

Operational Readiness and Cross-Functional Collaboration

• Lead cybersecurity readiness activities, exercises, runbooks, evidence collection, and transition-to-operations planning in preparation for terminal opening.
• Partner with IT infrastructure and operations, products and systems, digital and data teams, and business stakeholders to ensure cybersecurity controls are implemented effectively.
• Support the development of sustainable security operations and processes for ongoing terminal operations.

Required Qualifications

• 10+ years of cybersecurity experience, including substantial leadership experience in security operations, security engineering, or cybersecurity delivery.
• 5+ years managing or leading functions such as SOC, IAM, vulnerability management, incident response, or security engineering.
• Demonstrated experience managing MSSPs, outsourced SOC providers, or multi-vendor cybersecurity delivery models.
• Strong operational understanding of Microsoft security platforms, identity security, endpoint detection and response (EDR), vulnerability management, network security, and logging and monitoring architectures.
• Proven ability to coordinate cross-functional teams, manage competing priorities, resolve delivery challenges, and drive measurable results.
• Experience managing cybersecurity incidents, security remediation initiatives, and operational control implementation.
• Strong communication skills, including the ability to translate technical cybersecurity issues into clear business priorities and recommendations.
• Experience supporting executive-level stakeholders and presenting operational progress, risks, and outcomes.
• A demonstrated interest in progressing toward broader cybersecurity executive leadership and future CISO responsibilities.

Preferred Qualifications

• Experience in critical infrastructure, aviation, transportation, regulated industries, or complex IT/OT environments.
• Experience supporting cybersecurity readiness for a major launch, opening, transformation, or operational transition.
• Relevant certifications such as CISSP, CISM, GCIH, GCIA, GIAC security operations certifications, CCSP, Microsoft Security certifications, or equivalent credentials.

Key Success Measures

Success in this role will be measured by the ability to:

• Deliver cybersecurity roadmap initiatives on schedule with measurable operational impact.
• Improve the maturity and effectiveness of SOC, IAM, vulnerability management, and incident response capabilities.
• Drive timely resolution of critical vulnerabilities, control gaps, and partner delivery issues.
• Establish accurate, actionable operational metrics that support continuous improvement.
• Provide the CISO with reliable visibility into execution progress, incidents, dependencies, and operational readiness.
• Coordinate MSSP and third-party resources effectively, with clear accountability and consistent follow-through.
• Advance cybersecurity readiness for terminal opening and establish sustainable operational processes.

This position offers an opportunity for an experienced cybersecurity operations leader to work closely with the CISO, strengthen enterprise-wide security delivery, and expand their exposure to executive cybersecurity leadership. The successful candidate will bring the operational discipline, leadership maturity, and ambition to develop toward a future CISO appointment.