Strategic CISO — Enterprise Security, Risk & Compliance

The Security Executive Council; Austin (TX); On-site; USD 250,000 - 500,000; Full time

Benefits offered by this job

Health benefits

Equity compensation

Training and career growth

Flexible time off

Parental leave

Onsite snacks/meals

Job summary

Hippo is seeking a seasoned Chief Information Security Officer to steer cybersecurity strategy, security operations, and governance, risk, and compliance across the enterprise. This leader will own Hippo’s SOC 2 program, drive regulatory compliance for a multi-state, publicly traded insurance carrier, and report to the Board on cybersecurity posture and risk trends.

The role requires expert security engineering, regulatory acumen, and executive communication across Legal, Finance, and

Qualifications

• 10+ years in cybersecurity or information security with at least 5 in senior leadership (CISO/VP/Head of InfoSec)
• Experience at a regulated, publicly traded company with SOX involvement
• Track record building and managing security operations
• End-to-end ownership of a SOC 2 program including design, audit prep, remediation
• Experience with cybersecurity regulations in regulated industries (financial services, insurance, healthcare)
• Strong GRC background with risk registers, policy frameworks, controls libraries
• Proven ability to present cybersecurity risk/incident info to boards/audit committees/regulators
• Experience managing third-party and vendor cybersecurity risk programs
• Excellent cross-functional leadership with Legal, Finance, Internal Audit, and Engineering

Responsibilities

• Develop and execute Hippo’s enterprise cybersecurity strategy aligned with business risk and regulatory requirements
• Lead security operations including threat detection, incident response, vulnerability management, and threat intel
• Own SOC 2 program end-to-end from design to auditor engagement
• Steer governance, risk, and compliance including risk register, policy framework, standards, and control library
• Drive compliance with state and federal cybersecurity and insurance regulations
• Support SEC cybersecurity disclosures with Legal and Finance
• Lead identity governance and separation of duties enforcement
• Oversee privacy and data protection compliance with Legal on data handling and breach notification
• Manage third-party and vendor cybersecurity risk program
• Report to the Board and Audit & Risk Committee on posture, trends, and incidents
• Provide second-line input to the SOX ITGC program
• Build and lead security engineering with secure design standards and threat modeling
• Mentor cybersecurity team and foster security-aware culture
• Lead budgeting, roadmap planning, and technology rationalization
• Own disaster recovery and business continuity planning with CIO/CTO
• Oversee Enterprise Incident Response Plan and Security Incident Response Team
• Drive continuous improvement with remediation tracking for Audit & Risk Committee
• Lead supply chain risk management across open-source and third-party providers

Skills

CISO leadership

SOC 2

SOX audit

GRC

Board reporting

Vendor risk management

Security operations

Security engineering

Regulatory compliance

Incident response

Job description

Hippo is seeking a seasoned Chief Information Security Officer to steer cybersecurity strategy, security operations, and governance, risk, and compliance across the enterprise. This leader will own Hippo’s SOC 2 program, drive regulatory compliance for a multi-state, publicly traded insurance carrier, and report to the Board on cybersecurity posture and risk trends.

The role requires expert security engineering, regulatory acumen, and executive communication across Legal, Finance, and