Vice President, Information Security

O'Neil Digital Solutions, LLC; Monroe (NC); On-site; USD 180,000 - 280,000; Full time

Job summary

O'Neil Digital Solutions, LLC is seeking a Vice President of Information Security to define and lead the enterprise security program across a federated organization. The role balances governance with hands-on collaboration to implement controls, drive resilience, and reduce risk in regulated environments.

The VP will partner with IT, legal, compliance, and business leadership, advising the CIO on strategy, data protection, and program priorities while mentoring the security team and managing

Qualifications

• 15+ years of progressive experience in information security, cybersecurity or privacy.
• Deep expertise in security governance, policy development, ISMS and data privacy.
• Proven ability to partner with infrastructure, engineering, legal, compliance and audit teams.

Responsibilities

• Define and lead enterprise information security strategy, roadmap and operating model.
• Oversee governance, risk, data protection and privacy programs across federated services.
• Translate security requirements into business-aligned action plans with cross-functional teams.

Skills

Security governance

ISMS design

Executive communication

Cross-functional collaboration

Leadership

Job description

Select how often (in days) to receive an alert:

Title: Vice President, Information Security

About Us

Founded in 1973, O’Neil Digital Solutions (ODS) is a leading IT consulting firm specializing in the optimization of complex end-to-end business process systems for a multitude of business verticals including Financial Services, Digital Media, Healthcare, and Transportation industries. ODS provides high-touch bespoke software engineering, systems integration, and infrastructure management services to clients of all sizes and industries. From large scale mass communication projects to highly secure and confidential data analytics using Big Data frameworks like Hadoop and AWS Redshift, ODS has a broad set of proven technical capabilities that help companies make complex digital transformations. ODS offers state of the art publishing solutions through our customer-centric applications and services include electronic document delivery, web applications, high-speed digital printing (color and black & white), automated composition, offset printing, warehousing and fulfillment services. ODS is headquartered in Los Angeles, CA and also has offices/plants in Texas and North Carolina centrally located to serve clients across the country.

Summary

The Vice President of Information Security is the company’s senior information security leader and is responsible for defining, leading, and operationalizing the enterprise information security, cyber risk, governance, and data privacy program under the supervision of the CIO. This role suits a leader who is strong in policy, ISMS, governance, and privacy, but who also works hands-on with cross-functional teams to implement controls, improve resilience, and drive measurable risk reduction across a federated organization with shared services

Operating in a regulated environment, this executive will establish enterprise standards while enabling effective execution across business units, corporate functions, and shared services teams. This function will serve as the information security authority, advising the CIO and executive stakeholders on security strategy, compliance, data protection, operational risk, and program priorities.

As a member of the IT leadership team, the VP will translate security requirements into business-aligned action plans and partner closely with infrastructure, applications, legal, compliance, privacy, HR, internal audit, and business leadership. The role requires influence in a federated model, where success depends on strong governance, practical implementation, and collaboration without relying solely on direct authority.

Duties and Responsibilities

• Define and lead the enterprise information security strategy, roadmap, and operating model in alignment with business goals, regulatory obligations, and risk tolerance.
• Serve as the senior-most security leader for the organization, owning security governance, cyber risk, data protection, and security program maturity under the direction of the CIO.
• Establish, maintain, and continuously improve the Information Security Management System (ISMS), including policies, standards, procedures, control frameworks, exceptions, and governance forums.
• Build a federated security model that sets centralized expectations while enabling implementation across business units and shared services.
• Lead enterprise risk assessments, control reviews, remediation oversight, and executive reporting; develop metrics and dashboards that clearly communicate risk posture, program maturity, and priority actions.
• Own the enterprise data privacy and data protection program in partnership with legal and compliance, including data handling, classification, retention, privacy risk assessments, and response coordination for privacy incidents.
• Partner with cross-functional teams to operationalize security requirements in technology and business processes, including identity and access management, third-party risk, secure architecture, vulnerability management, incident response, and resilience planning.
• Oversee audits, regulatory examinations, customer security reviews, and internal control activities relevant to information security and privacy.
• Lead, mentor, and scale internal team capabilities while effectively leveraging third-party providers, managed services, and external specialists where appropriate.
• Act as a trusted advisor to the CIO and executive leadership team, presenting clear recommendations that balance protection, usability, speed, and business outcomes.

Qualifications & Requirements

• 15+ years of progressive experience in information security, cybersecurity, technology risk, privacy, or related disciplines, including significant leadership experience in complex or regulated environments.
• Deep expertise in security governance, policy development, ISMS design and operation, risk management, and data privacy.
• Proven success moving from policy and oversight to practical implementation through strong partnership with infrastructure, engineering, applications, legal, compliance, audit, and business teams.
• Experience operating effectively in a federated or decentralized enterprise with shared services and multiple stakeholder groups.
• Strong executive communication skills, with the ability to explain technical and risk issues clearly to the CIO, senior leadership, auditors, and non-technical partners.
• Demonstrated experience building programs, leading through influence, and establishing credibility as the senior security authority in an organization.

Preferred qualifications

• Experience in one or more regulated industries such as healthcare, financial services, insurance, energy, or other compliance-intensive sectors.
• Familiarity with frameworks and standards such as ISO 27001, NIST, SOC, ITGC, privacy regulations, and third-party risk practices.
• Relevant certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer/Auditor.

Working Conditions

Must be able to perform the essential job duties. Work is performed primarily in an office environment. Typically requires the ability to sit for extended periods of time (66%+ each work day), ability to hear the telephone, ability to enter data on a computer and may also require the ability to lift up to 10 pounds.

Equal Opportunity Employer

O'Neil Digital Solutions is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.