Strategic CISO: Lead Enterprise Security & Risk

GVW Group; Chicago (IL); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Medical/dental/vision

401K plan

Incentive bonus opportunities

Job summary

GVW Group seeks a Chief Information Security Officer (CISO) to lead enterprise security strategy, risk management, and incident response. This on-site role reports to the CFO and can be based in Birmingham, AL or Chicago, IL.

You will oversee cloud security, compliance (GDPR, HIPAA, CCPA, ISO 27001), and security operations, partnering with senior leadership to align security with business goals.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field.
• Master’s degree preferred.
• CISSP, CISM, CISA, or CRISC certifications highly desirable.

Responsibilities

• Strategic leadership and enterprise security strategy development.
• Advise senior management and the Board on cybersecurity risks and threats.
• Align security with business objectives to support growth and manage risk.
• Identify and mitigate cybersecurity risks with formal controls.
• Develop and enforce company-wide security policies and standards.
• Oversee security operations, including cloud, network, and data protection.
• Lead incident response planning and execution for breaches.
• Conduct audits, risk assessments, and penetration testing.
• Establish partnerships with industry groups and vendors.

Skills

Strategic Leadership

Cybersecurity Strategy

Risk Management

Cloud Security

Incident Response

Regulatory Compliance

Leadership

Communication

Education

Bachelor’s degree in CS/IT

Master’s degree preferred

CISSP

CISM

CISA

CRISC

Job description

GVW Group seeks a Chief Information Security Officer (CISO) to lead enterprise security strategy, risk management, and incident response. This on-site role reports to the CFO and can be based in Birmingham, AL or Chicago, IL.

You will oversee cloud security, compliance (GDPR, HIPAA, CCPA, ISO 27001), and security operations, partnering with senior leadership to align security with business goals.