Remote Chief Information Security Officer

CorServ; United States; Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Company-paid benefits (medical, dental

Remote-friendly environment

401k match

Generous PTO

Job summary

CorServ is seeking a senior cybersecurity leader to establish and govern a comprehensive security program across the enterprise. You will align security with business objectives, regulatory requirements, and client expectations, while guiding risk-based decisions and remediation strategies.

The role requires deep expertise in governance, architecture, incident response, vulnerability management, and compliance with PCI DSS and SOC 2.

Qualifications

• 10+ years of progressive experience in information security or related disciplines.
• Strong knowledge of governance, risk management, security architecture, incident response, and operations.
• Deep understanding of NIST, PCI DSS, and SOC 2.

Responsibilities

• Establish a cybersecurity governance framework aligned with business objectives and regulatory requirements.
• Set security priorities and a roadmap based on risk, technology needs, and threats.
• Lead enterprise cybersecurity risk assessments and remediation decisions.
• Maintain a security program aligned with PCI DSS, SOC 2, and banking requirements.
• Oversee PCI and SOC compliance activities, training, and regular reviews.
• Provide leadership for regulatory examinations, audits, pen tests, and third-party reviews.
• Oversee third-party cybersecurity risk management and vendor monitoring.
• Provide security architecture oversight across applications, APIs, databases, networks, and cloud.
• Establish security architecture principles for confidentiality, integrity, availability, resilience.
• Ensure operation of firewalls, IDS/IPS, encryption, DLP, file integrity, and vulnerability management.
• Oversee IAM controls including privileged access, MFA, and access reviews.
• Lead vulnerability management across infrastructure and applications with risk-based prioritization.
• Oversee security monitoring to detect unauthorized activity and emerging threats.
• Partner with Technology and Dev teams to remediate vulnerabilities within risk timelines.
• Own the incident response program with tested plans and clear communication protocols.
• Promote a security-conscious culture and responsible handling of company/client data.

Skills

Security governance

Risk management

Security architecture

Incident response

Vulnerability management

Security operations

Data protection

IAM / access control

Endpoint security

Network security

Cloud security

Threat monitoring

Education

Bachelor's degree in Cybersecurity/IT/CS/IS/Engineering

CISSP, CISM, CRISC, CCSP or equivalent

Job description

CorServ is seeking a senior cybersecurity leader to establish and govern a comprehensive security program across the enterprise. You will align security with business objectives, regulatory requirements, and client expectations, while guiding risk-based decisions and remediation strategies.

The role requires deep expertise in governance, architecture, incident response, vulnerability management, and compliance with PCI DSS and SOC 2.