VP, Cybersecurity

Vertafore; Denver (CO); On-site; USD 220,000 - 250,000; Full time

Job summary

Vertafore, headquartered in Denver, Colorado, seeks a VP of Cybersecurity to develop and execute its enterprise cybersecurity strategy and lead security operations, architecture, and risk mitigation for SaaS products and cloud infrastructure. This executive will partner with Engineering, IT, Legal, and Compliance to align security with business goals and regulatory obligations.

The role requires building high-performing global teams, managing budgets, and delivering security improvements across

Responsibilities

• Develop a multi-year, risk-based cybersecurity strategy aligned with Vertafore priorities.
• Lead and develop high-performing cybersecurity teams, establish accountability and security culture.
• Own cybersecurity budgets, resource planning, vendor investments, and performance metrics; report material risks.
• Advance zero-trust principles including identity and access management, least privilege, network segmentation, and continuous verification.
• Partner with Roper Technologies to align with the cyber controls framework and provide reporting on maturity, risks, and incidents.
• Lead security monitoring, threat detection, investigation, containment, and remediation with 24/7 operations.
• Oversee security tooling, detection engineering, endpoint protection, threat intelligence, and threat hunting.
• Maintain incident response plans and coordinate with IT, Engineering, Legal, Compliance and external specialists; conduct post-incident reviews.
• Partner with IT and business continuity on cyber recovery readiness, ransomware resilience, and DR exercises.
• Define and monitor operational measures such as detection coverage, response effectiveness and remediation timeliness.
• Direct security architecture and engineering for cloud environments, SaaS platforms, and data center systems.
• Collaborate with Product and Engineering to integrate security into SDLC, including secure design, code and dependency security, pentesting and remediation.
• Set AI-security requirements including access controls, prompt-injection defenses, data protection, and monitoring of AI threats.
• Assess material security risks from development environments, cloud configurations, privileged access, and third-party tech.
• Oversee risk assessments, threat modeling, vulnerability identification, prioritization and remediation enterprise-wide.
• Establish and validate security controls and standards; align with frameworks.
• Coordinate vendor security assessments with Compliance and governance teams.
• Support audits and regulatory obligations while owning technical security controls.
• Provide executive-level support for significant customer security inquiries and commitments.
• Coordinate customer assessments and audit evidence; ensure timely resolution of issues.
• Communicate cybersecurity priorities and risk decisions clearly to business leaders.
• Lead security projects and transformation initiatives within scope, timelines and budget.

Job description

$220,000 - $250,000 / year

The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations.

Underpinned by unmatched speed and performance power, we are the trusted backbone that’s taking the insurance industry from friction to flow with Distribution Velocity – speed, performance, and trust - to drive growth at scale.

With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era.

Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India.

The VP, Cybersecurity is responsible for developing and executing Vertafore's enterprise cybersecurity strategy and leading the organization's cybersecurity operations, architecture, engineering, and risk mitigation programs. This executive is accountable for protecting Vertafore's SaaS products, cloud infrastructure, corporate systems, and sensitive customer data through effective security controls, proactive threat detection, incident response, and continuous security improvement.

The VP provides strategic leadership across security operations, product and application security, cloud security, identity and access management, vulnerability management, and emerging technology security, including artificial intelligence. The role partners closely with Engineering, Product, Information Technology, Legal, and Compliance to integrate security into business operations and product development while supporting Vertafore's customer commitments and regulatory obligations.

As a senior leader, the VP establishes measurable cybersecurity objectives, develops high-performing global security teams, manages cybersecurity investments, and provides executive leadership with clear visibility into material security risks, operational performance, and security program maturity.

Core Duties and Responsibilities:

Enterprise Cybersecurity Strategy and Leadership

• Develop and execute a multi-year, risk-based cybersecurity strategy and roadmap aligned with Vertafore business priorities and evolving threats.
• Lead and develop high-performing cybersecurity teams, establish clear accountability, and support succession planning, professional development, and a strong security culture.
• Own cybersecurity budgets, resource planning, vendor investments, program priorities, and performance metrics; report material risks and progress to executive leadership.
• Advance zero-trust principles, including identity and access management, least privilege, network segmentation, and continuous verification.
• Partner with Roper Technologies corporate cybersecurity to align Vertafore’s program with the Roper cyber controls framework, participate in portfolio-wide security initiatives, and provide timely reporting on control maturity, material risks, and incidents

Security Operations, Incident Response, and Resilience

• Lead security monitoring, threat detection, investigation, containment, and remediation capabilities, including a coordinated 24/7 monitoring and response operating model.
• Oversee security operations tooling, detection engineering, endpoint protection, threat intelligence, threat hunting, and external attack surface management.
• Maintain and exercise cybersecurity incident response plans; coordinate response with IT, Engineering, Legal, Compliance, and external specialists, including post-incident reviews and corrective actions.
• Partner with IT and business continuity owners on cyber recovery readiness, ransomware resilience, disaster recovery exercises, and response to major technology disruptions.
• Define and monitor operational measures such as detection coverage, response effectiveness, remediation timeliness, and control performance.

Cloud, Product, Application and AI Security

• Direct security architecture and engineering for cloud environments, SaaS platforms, corporate infrastructure, and data center systems where applicable.
• Partner with Product and Engineering to integrate security into the software development lifecycle, including secure design, code and dependency security, penetration testing, and remediation of application vulnerabilities.
• Establish security requirements and review processes for AI-enabled products, agents, models, and integrations, including access controls, prompt-injection defenses, sensitive-data protection, and monitoring of AI-specific threats.
• Assess material security risks arising from development environments, cloud configurations, privileged access, and third-party technology integrations.

Technical Risk and Third-party Security

• Oversee technical risk assessments, threat modeling, vulnerability identification, prioritization, and remediation across the enterprise and product environments.
• Establish and validate security controls and technical standards consistent with applicable frameworks and business requirements
• Partner with Compliance on vendor security assessments by defining technical security requirements, evaluating material vendor risks, and tracking technical remediation.
• Partner with Legal and Compliance to support security governance, contractual commitments, audits, and regulatory obligations while retaining ownership of technical security controls and corrective actions.

Customer Security and Cross-Functional Partnership

• Provide executive-level technical support for significant customer security inquiries, escalations, and security-related commitments.
• Partner with Compliance and Assurance on customer assessments and audit evidence, ensuring technical accuracy and timely resolution of security issues; support rather than duplicate operational questionnaire and audit coordination.
• Build productive relationships with business and technology leaders and communicate cybersecurity priorities, tradeoffs, and risk decisions clearly.
• Lead cybersecurity projects and transformation initiatives to deliver defined security outcomes within approved scope, timelines, and budgets.