Enterprise Cybersecurity Leader (CISO)

GVW Group; Birmingham (AL); On-site; USD 180,000 - 240,000; Full time

Job summary

GVW Group seeks a Chief Information Security Officer (CISO) to lead the enterprise security program and protect critical assets. The role requires guiding security strategy, risk management, and incident response in a dynamic, privately held investment and industrial holding company.

The candidate will report to the CFO and work on security for cloud, on-premises infrastructure, and third-party vendors. A strong track record in enterprise cybersecurity is essential.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field (Master’s preferred).
• Industry certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.

Responsibilities

• Establish and maintain the enterprise information security vision, strategy and program.
• Advise leadership on cybersecurity risks, compliance and threats.
• Develop and enforce security policies, standards, and procedures.
• Oversee security operations, including firewalls, IDS, and encryption.
• Lead incident response plans and coordinate breach investigations.
• Ensure regulatory compliance (GDPR, HIPAA, CCPA, ISO 27001) and risk management.
• Collaborate with business units to align security with growth goals.
• Manage cloud security, DevSecOps and third-party risk.

Skills

Leadership

Strategic thinking

Communication

Collaboration

Incident response

Cloud security

Data protection

Risk management

Regulatory compliance

Analytical skills

Education

Bachelor’s degree (CS/IT or related)

Master’s degree preferred

CISSP/CISM/CISA/CRISC certifications

Job description

GVW Group seeks a Chief Information Security Officer (CISO) to lead the enterprise security program and protect critical assets. The role requires guiding security strategy, risk management, and incident response in a dynamic, privately held investment and industrial holding company.

The candidate will report to the CFO and work on security for cloud, on-premises infrastructure, and third-party vendors. A strong track record in enterprise cybersecurity is essential.