Global Information Security Leader (CISO)

Deluxe; Atlanta (GA); On-site; USD 180,000 - 270,000; Full time

Benefits offered by this job

Healthcare (Medical, Dental, Vision)

Paid Time Off

Employer-Matched Retirement Plan

Employee Stock Purchase Plan

Short-Term and Long-Term Disability

Infertility Treatment, Adoption andSur

Tuition Reimbursement

Job summary

Deluxe Corporation is seeking a senior Information Security leader to build and mature a global information security program protecting customer and company data. You will drive regulatory compliance, collaborate with executives, and guide cyber defense across multiple domains.

The role emphasizes risk management, talent development, and frequent reporting to the board and risk teams as part of enterprise resilience initiatives.

Qualifications

• Experience designing and operating enterprise information security programs.
• Proven ability to meet regulatory and client security requirements.
• Track record of leading security teams and communicating with senior leadership.

Responsibilities

• Evolve and implement information security program across AppSec, InfoSec, and CorpSec.
• Build security teams with external perspectives and diverse talent.
• Ensure compliance with SOC 1/2, NIST, ISO 27001, PCI, HIPAA, CCPA and related laws.
• Work with Revenue Units to assess and manage information security risks.
• Provide regular reporting to risk committees and board on program status.
• Oversee technology risk management and ensure availability, integrity and confidentiality.

Skills

Information security

Risk management

Regulatory compliance

Leadership

Board reporting

Education

Bachelor’s degree

Master’s degree

Tools

SOC 1 / SOC 2

NIST 800-30

ISO 27001

PCI

HIPAA

CCPA

Job description

Deluxe Corporation is seeking a senior Information Security leader to build and mature a global information security program protecting customer and company data. You will drive regulatory compliance, collaborate with executives, and guide cyber defense across multiple domains.

The role emphasizes risk management, talent development, and frequent reporting to the board and risk teams as part of enterprise resilience initiatives.