Vice President, Information Security

O'Neil Digital Solutions, LLC; Los Angeles, Northern (CA, KY); Hybrid; USD 180,000 - 280,000; Full time

Job summary

O’Neil Digital Solutions, a Los Angeles-based IT services firm, seeks a Vice President of Information Security to define and lead a comprehensive enterprise security program. The role emphasizes policy, ISMS governance, and privacy, while working hands-on with cross-functional teams to implement controls and reduce risk across a federated organization.

The VP will partner with CIO and executives to set strategy, drive security maturity, and ensure compliance and data protection across business

Qualifications

• 15+ years of progressive experience in information security, cybersecurity, privacy, or related areas, with significant leadership.
• Deep expertise in security governance, policy development, ISMS, risk management, and privacy.
• Proven ability to move from policy to practical implementation through cross-functional collaboration.

Responsibilities

• Define and lead the enterprise information security strategy, roadmap, and operating model.
• Serve as the senior-most security leader for governance, risk, data protection, and program maturity.
• Establish and improve the ISMS, including policies, standards, and governance forums.
• Build a federated security model enabling implementation across units and shared services.
• Lead risk assessments, remediation oversight, and executive reporting with clear metrics.
• Own data privacy and data protection programs in partnership with legal and compliance.

Skills

Leadership

ISMS

Governance

Policy development

Cybersecurity strategy

Education

Bachelor's degree in Information Security

Tools

CISSP

CISM

CRISC

CISA

ISO 27001 Lead

Job description

Select how often (in days) to receive an alert:

Title: Vice President, Information Security

About Us

Founded in 1973, O’Neil Digital Solutions (ODS) is a leading IT consulting firm specializing in the optimization of complex end-to-end business process systems for a multitude of business verticals including Financial Services, Digital Media, Healthcare, and Transportation industries. ODS provides high-touch bespoke software engineering, systems integration, and infrastructure management services to clients of all sizes and industries. From large scale mass communication projects to highly secure and confidential data analytics using Big Data frameworks like Hadoop and AWS Redshift, ODS has a broad set of proven technical capabilities that help companies make complex digital transformations. ODS offers state of the art publishing solutions through our customer-centric applications and services include electronic document delivery, web applications, high-speed digital printing (color and black & white), automated composition, offset printing, warehousing and fulfillment services. ODS is headquartered in Los Angeles, CA and also has offices/plants in Texas and North Carolina centrally located to serve clients across the country.

Summary

The Vice President of Information Security is the company’s senior information security leader and is responsible for defining, leading, and operationalizing the enterprise information security, cyber risk, governance, and data privacy program under the supervision of the CIO. This role suits a leader who is strong in policy, ISMS, governance, and privacy, but who also works hands-on with cross-functional teams to implement controls, improve resilience, and drive measurable risk reduction across a federated organization with shared services

Operating in a regulated environment, this executive will establish enterprise standards while enabling effective execution across business units, corporate functions, and shared services teams. This function will serve as the information security authority, advising the CIO and executive stakeholders on security strategy, compliance, data protection, operational risk, and program priorities.

As a member of the IT leadership team, the VP will translate security requirements into business-aligned action plans and partner closely with infrastructure, applications, legal, compliance, privacy, HR, internal audit, and business leadership. The role requires influence in a federated model, where success depends on strong governance, practical implementation, and collaboration without relying solely on direct authority.

Duties and Responsibilities

• Define and lead the enterprise information security strategy, roadmap, and operating model in alignment with business goals, regulatory obligations, and risk tolerance.
• Serve as the senior-most security leader for the organization, owning security governance, cyber risk, data protection, and security program maturity under the direction of the CIO.
• Establish, maintain, and continuously improve the Information Security Management System (ISMS), including policies, standards, procedures, control frameworks, exceptions, and governance forums.
• Build a federated security model that sets centralized expectations while enabling implementation across business units and shared services.
• Lead enterprise risk assessments, control reviews, remediation oversight, and executive reporting; develop metrics and dashboards that clearly communicate risk posture, program maturity, and priority actions.
• Own the enterprise data privacy and data protection program in partnership with legal and compliance, including data handling, classification, retention, privacy risk assessments, and response coordination for privacy incidents.
• Partner with cross-functional teams to operationalize security requirements in technology and business processes, including identity and access management, third-party risk, secure architecture, vulnerability management, incident response, and resilience planning.
• Oversee audits, regulatory examinations, customer security reviews, and internal control activities relevant to information security and privacy.
• Lead, mentor, and scale internal team capabilities while effectively leveraging third-party providers, managed services, and external specialists where appropriate.
• Act as a trusted advisor to the CIO and executive leadership team, presenting clear recommendations that balance protection, usability, speed, and business outcomes.

Qualifications & Requirements

• 15+ years of progressive experience in information security, cybersecurity, technology risk, privacy, or related disciplines, including significant leadership experience in complex or regulated environments.
• Deep expertise in security governance, policy development, ISMS design and operation, risk management, and data privacy.
• Proven success moving from policy and oversight to practical implementation through strong partnership with infrastructure, engineering, applications, legal, compliance, audit, and business teams.
• Experience operating effectively in a federated or decentralized enterprise with shared services and multiple stakeholder groups.
• Strong executive communication skills, with the ability to explain technical and risk issues clearly to the CIO, senior leadership, auditors, and non-technical partners.
• Demonstrated experience building programs, leading through influence, and establishing credibility as the senior security authority in an organization.

Preferred qualifications

• Experience in one or more regulated industries such as healthcare, financial services, insurance, energy, or other compliance-intensive sectors.
• Familiarity with frameworks and standards such as ISO 27001, NIST, SOC, ITGC, privacy regulations, and third-party risk practices.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Auditor.

Working Conditions

Must be able to perform the essential job duties. Work is performed primarily in an office environment. Typically requires the ability to sit for extended periods of time (66%+ each work day), ability to hear the telephone, ability to enter data on a computer and may also require the ability to lift up to 10 pounds.

Equal Opportunity Employer

O'Neil Digital Solutions is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.