Vice President, Information Security

Uplight; Boulder (CO); On-site; USD 220,000 - 250,000; Full time

Benefits offered by this job

Flexible time off

Parental leave

Work flexibility

Job summary

Uplight is seeking a VP, Information Security (CISO) to lead enterprise security, privacy, and risk programs. You will serve as a trusted advisor to customers, partners, investors, and Boards while scaling impact across the clean energy ecosystem.

This role requires deep security expertise and executive presence to build trust with utility customers, Boards, and external partners. You will own SOC 2 and external audit programs and drive resilience and compliance across the organization.

Qualifications

• 10+ years of business experience in a combination of IT security, risk management, or Information Security.
• Demonstrated executive level business and technical acumen.
• Ability to develop and clearly articulate a compelling security strategy to key management stakeholders.
• Pragmatic mindset, ability to handle difficult problems with partial data and under high pressure.
• Strong knowledge of current and emerging cyber security risks and innovative risk management methods and solutions.
• Strong understanding of security concepts and technologies.
• Experience applying security frameworks such as ISO 2700x, NIST CSF, or NIST 800-53 including compliance and audit strategies for cloud environments (IaaS, SaaS, etc)
• Subject matter expertise in developing and executing company-wide program, policies, procedure, and controls
• Expertise in domains such as application development, application security, security operations, cybersecurity monitoring, vulnerability management, incident management/response, identity and access management, and cloud infrastructure (AWS/GCP/Azure)
• Excellent verbal and written skills and be comfortable presenting ideas and issues to different levels within and outside of the organization, including directly with Uplight's Board and/or Audit Committee

Responsibilities

• Define a cyber security strategy and capability roadmap that keeps pace with cyber threats and Uplight's growth plans
• Develop, implement, and monitor a strategic, comprehensive enterprise risk management program
• Provide leadership to security professionals and teams, including recruitment, development, and performance management.
• Create a cyber risk strategy that identifies and defines risk tolerance levels and prioritizes mitigation strategies and activities
• Identify key metrics to measure enterprise-wide security effectiveness and support program governance
• Manage potential security incidents, communicating any suspected or confirmed incidents with business leaders, and performing in depth investigations as required
• Assist the sales function as necessary to educate potential and current customers on Uplight's security posture
• Assist sales and legal with customer contractual negotiations in relation to security requirements, including any customer security requests
• Implement and oversee procedures and controls to assure compliance with applicable regulatory, legal, and contractual requirements
• Own SOC 2 and other external audit programs and manage technical internal audit processes
• Manage the 3rd party/vendor risk management process
• Facilitate the resilience program to ensure appropriate incident response, business continuity, and disaster recovery programs are in place
• Collaborate with Legal on the privacy program and manage privacy operations
• Proactive partnership across the organization to ensure security, compliance, risk, and privacy concerns are delivered in a way that strikes balance and works for our customers and the business.

Skills

Executive leadership

Security strategy

Risk management

Security governance

Security frameworks

Cloud security

Incident response

Identity access

Audit & compliance

SOC 2

Vendor risk

Security certs

Privacy program

Education

Security certifications

Tools

Cloud platforms

Job description

Uplight is creating a new category of energy. We make software that manages energy resources in homes and businesses—including things like smart thermostats, electric vehicles, solar panels, storage batteries, heat pumps, and even people's behavior, to generate, shift, or save energy to balance the grid, making it more efficient and reliable. This creates clean energy capacity that can be used by the power grid instead of burning more fossil fuels. Our solutions accelerate the transition to clean energy and save money for energy customers.

We are looking for a VP, Information Security (CISO) to drive our company forward, and help us lead the clean energy revolution! We are seeking a strategic VP, Information Security (CISO) to lead our enterprise security, privacy, and risk programs. You will serve as a trusted advisor to customers, partners, investors, and other industry stakeholders while scaling our impact across the clean energy ecosystem.

This operational and strategic role requires deep security expertise and executive presence to build trust with utility customers, Boards, and external partners.

How you will make an impact:

• Define a cyber security strategy and capability roadmap that keeps pace with cyber threats and Uplight's growth plans
• Develop, implement, and monitor a strategic, comprehensive enterprise risk management program
• Provide leadership to security professionals and teams, including recruitment, development, and performance management.
• Create a cyber risk strategy that identifies and defines risk tolerance levels and prioritizes mitigation strategies and activities
• Identify key metrics to measure enterprise-wide security effectiveness and support program governance
• Manage potential security incidents, communicating any suspected or confirmed incidents with business leaders, and performing in depth investigations as required
• Assist the sales function as necessary to educate potential and current customers on Uplight's security posture
• Assist sales and legal with customer contractual negotiations in relation to security requirements, including any customer security requests
• Implement and oversee procedures and controls to assure compliance with applicable regulatory, legal, and contractual requirements
• Own SOC 2 and other external audit programs and manage technical internal audit processes
• Manage the 3rd party/vendor risk management process
• Facilitate the resilience program to ensure appropriate incident response, business continuity, and disaster recovery programs are in place
• Collaborate with Legal on the privacy program and manage privacy operations
• Proactive partnership across the organization to ensure security, compliance, risk, and privacy concerns are delivered in a way that strikes balance and works for our customers and the business.

What you bring to Uplight:

• 10+ years of business experience in a combination of IT security, risk management, or Information Security with 7+ years in a leadership role
• Demonstrated executive level business and technical acumen
• Ability to develop and clearly articulate a compelling security strategy to key management stakeholders
• Pragmatic mindset, ability to handle difficult problems with partial data and under high pressure
• Strong knowledge of current and emerging cyber security risks and innovative risk management methods and solutions
• Strong understanding of security concepts and technologies
• Experience applying security frameworks such as ISO 2700x, NIST CSF, or NIST 800-53 including compliance and audit strategies for cloud environments (IaaS, SaaS, etc)
• Subject matter expertise in developing and executing company-wide program, policies, procedure, and controls
• Expertise in domains such as application development, application security, security operations, cybersecurity monitoring, vulnerability management, incident management/response, identity and access management, and cloud infrastructure (AWS/GCP/Azure)
• Excellent verbal and written skills and be comfortable presenting ideas and issues to different levels within and outside of the organization, including directly with Uplight's Board and/or Audit Committee

Bonus points:

• Completion of prior successful external audits, such as SOC 2
• Prior experience automating compliance controls
• Certification showing expertise in security management, audit, or risk management (e.g. CISSP, CISA, CISM, CRISC)

Why Join Uplight in Leading the Fight Against Climate Change?

At Uplight, we're not just offering a job – we're offering a chance to be part of the solution to one of the world's biggest challenges. As a certified B Corporation, we're deeply committed to both social and environmental responsibility. Here's why you should join our team of passionate Uplighters:

• Make a Meaningful Impact: Your work directly impacts our mission of decarbonization and building a more sustainable future.
• Grow Your Career: We offer ample advancement opportunities, robust learning and development programs, and a supportive team environment that fosters collaboration and innovation.
• Thrive: We offer comprehensive benefits, including flexible time off, generous parental leave, and work flexibility to help you thrive both personally and professionally.
• Belong to an Inclusive Community: We celebrate diversity and foster an inclusive workplace where everyone feels respected, empowered, and heard. Our Employee Resource Groups offer opportunities to connect with colleagues who share your interests and backgrounds.
• Be Part of a Growing Movement: Join a team of dedicated individuals who are passionate about creating a more sustainable future. We offer a collaborative environment where your ideas are valued and your contributions recognized. Together, we can build a brighter tomorrow.

To learn more about our comprehensive benefits package and other perks, visit uplight.com/careers

Salary Range: $220,000 to $250,000 + Bonus

Application Deadline: December 15, 2026

In accordance with the Colorado Equal Pay for Equal Work Act, the approximate annual base compensation range is listed above. The actual offer, reflecting the total compensation package and benefits, will be determined by a number of factors including the applicant's experience, knowledge, skills, and abilities, as well as internal equity among our team.

Uplight provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race (including hair texture and hairstyles), color, religion (including head coverings), age, sex, national origin, disability status (including neurodivergence), genetics, protected veteran status, sexual orientation, gender identity or expression, neurotypicality, or any other characteristic protected by federal, state or local laws.