VP, Information Security & Cyber Resilience

SWCA Environmental Consultants; Phoenix (AZ); On-site; USD 220,000 - 320,000; Full time

Job summary

SWCA Environmental Consultants seeks a Vice President, Information Security to lead cybersecurity, governance, risk, compliance, and business continuity programs. You will advise the Board and senior leadership, set enterprise security direction, and drive resilience across SWCA.

The role collaborates with executives across legal, HR, finance, and operations to enable secure growth, data protection, and responsible AI adoption while maturing security governance and reporting.

Qualifications

• Executive presence with the ability to advise senior leaders, clients, and the Board.
• Business-minded, risk-based decision maker who balances protection, enablement, and growth.
• Deep expertise in cybersecurity, compliance, resilience, data protection, and governance.

Responsibilities

• Define and execute an enterprise cybersecurity strategy aligned with SWCA's business objectives and risk appetite.
• Serve as the senior executive advisor on cyber risk, regulatory obligations, emerging threats, and security investments.
• Establish executive-level reporting, KPIs, maturity roadmaps, and governance mechanisms.
• Lead enterprise security operations across threat detection, incident response, and identity access management.
• Oversee governance, risk, and compliance programs including third-party risk management and client security assessments.
• Drive data protection, business continuity, and AI security governance across the organization.

Skills

Cybersecurity Strategy

Executive Leadership

Governance

Tools

GRC Tools

Job description

SWCA Environmental Consultants seeks a Vice President, Information Security to lead cybersecurity, governance, risk, compliance, and business continuity programs. You will advise the Board and senior leadership, set enterprise security direction, and drive resilience across SWCA.

The role collaborates with executives across legal, HR, finance, and operations to enable secure growth, data protection, and responsible AI adoption while maturing security governance and reporting.