Vice President of Information Security

Uplight; Denver (CO); Sur place; USD 180 000 - 320 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision coverage

Flexible PTO & Holidays

401k match

Parental leave

Learning and development

Résumé du poste

Uplight is seeking a strategic VP of Information Security (CISO) to lead enterprise security, privacy, and risk programs and to serve as a trusted advisor to customers, partners, and the board. The role demands executive presence, deep security expertise, and the ability to scale security across the organization and its ecosystem.

You will define a cyber security strategy and capability roadmap, manage risk, and own audit programs including SOC 2.

Qualifications

• Proven ability to develop and execute a company-wide security program
• Strong leadership and people-management experience at executive level
• Extensive experience with risk management and governance
• Experience applying security frameworks (ISO 27001, NIST CSF, NIST 800-53)
• Demonstrated expertise in cloud security across IaaS/SaaS platforms

Responsabilités

• Define a cyber security strategy and roadmap aligned with growth and risk appetite
• Lead enterprise security, privacy, and risk programs and teams
• Serve as trusted advisor to customers, partners, and boards with executive presence
• Own security audits, regulatory compliance, and third-party risk management
• Oversee resilience, incident response, and disaster recovery programs
• Collaborate with Legal on privacy and data protection initiatives
• Support sales and legal in security requirements during customer engagements

Connaissances

Security strategy

Executive leadership

Risk management

Compliance

Cloud security

Security frameworks

Vendor risk

Incident response

Communication

Description du poste

• We are looking for a VP, Information Security (CISO) to drive our company forward, and help us lead the clean energy revolution
• We are seeking a strategic VP, Information Security (CISO) to lead our enterprise security, privacy, and risk programs
• You will serve as a trusted advisor to customers, partners, investors, and other industry stakeholders while scaling our impact across the clean energy ecosystem
• This operational and strategic role requires deep security expertise and executive presence to build trust with utility customers, Boards, and external partners
• Define a cyber security strategy and capability roadmap that keeps pace with cyber threats and Uplight’s growth plans
• Develop, implement, and monitor a strategic, comprehensive enterprise risk management program
• Provide leadership to security professionals and teams, including recruitment, development, and performance management
• Create a cyber risk strategy that identifies and defines risk tolerance levels and prioritizes mitigation strategies and activities
• Identify key metrics to measure enterprise-wide security effectiveness and support program governance
• Manage potential security incidents, communicating any suspected or confirmed incidents with business leaders, and performing in depth investigations as required
• Assist the sales function as necessary to educate potential and current customers on Uplight’s security posture
• Assist sales and legal with customer contractual negotiations in relation to security requirements, including any customer security requests
• Implement and oversee procedures and controls to assure compliance with applicable regulatory, legal, and contractual requirements
• Own SOC 2 and other external audit programs and manage technical internal audit processes
• Manage the 3rd party/vendor risk management process
• Facilitate the resilience program to ensure appropriate incident response, business continuity, and disaster recovery programs are in place
• Collaborate with Legal on the privacy program and manage privacy operations
• Proactive partnership across the organization to ensure security, compliance, risk, and privacy concerns are delivered in a way that strikes balance and works for our customers and the business

Benefits

• Medical: We offer robust medical, dental, and vision coverage for you and your family. Coverage begins on the first day of the month following your start date.
• Flexible PTO & Holidays: Recharge with our flexible paid time off policy and a heap of company holidays. Take the time you need when you’re under the weather.
• 401k Match: We know saving for the future is important, so we help contribute to your retirement with a 3% match that vests immediately and is eligible after 90 days of service.
• Parental Leave: We provide a generous 16 weeks of fully paid leave for birthing parents and 8 weeks of fully paid leave for non-birthing parents, plus support programs.
• Learning and Development: Take charge of your career development with courses tailored to your interests and goals.

Strong knowledge of current and emerging cyber security risks and innovative risk management methods and solutionsPragmatic mindset, ability to handle difficult problems with partial data and under high pressureStrong understanding of security concepts and technologiesExcellent verbal and written skills and be comfortable presenting ideas and issues to different levels within and outside of the organization, including directly with Uplight’s Board and/or Audit CommitteeExperience applying security frameworks such as ISO 2700x, NIST CSF, or NIST 800-53 including compliance and audit strategies for cloud environments (IaaS, SaaS, etc)10+ years of business experience in a combination of IT security, risk management, or Information Security with 7+ years in a leadership roleDemonstrated executive level business and technical acumenSubject matter expertise in developing and executing company-wide program, policies, procedure, and controlsAbility to develop and clearly articulate a compelling security strategy to key management stakeholdersExpertise in domains such as application development, application security, security operations, cybersecurity monitoring, vulnerability management, incident management/response, identity and access management, and cloud infrastructure (AWS/GCP/Azure)Prior experience automating compliance controlsCertification showing expertise in security management, audit, or risk management (e.g. CISSP, CISA, CISM, CRISC)

Don’t meet every single requirement? Studies have shown that women, marginalized genders and people of color are less likely to apply to jobs unless they meet every single qualification. At Uplight we are dedicated to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles

Completion of prior successful external audits, such as SOC 2