VP, Information Security & Strategy

TravelCenters of America; Denver (CO); On-site; USD 200,000 - 320,000; Full time

Job summary

PTMA, a SEC-registered investment adviser, seeks a VP of Information Security to own strategy, risk, and operations across governance, security architecture, and incident response. This leader will align to the executive team, drive roadmap, manage budgets, and coordinate with Legal, Compliance, and board members.

The role requires senior-level experience in regulated environments, hands-on incident response, and success building security programs that scale with data and AI initiatives.

Qualifications

• 12+ years in information security, including 5+ years leading a security program or function.
• Security leadership experience at SEC- or FINRA-regulated firms.
• Direct experience leading regulatory examinations, audits, and client security due diligence.
• Track record presenting security risk to boards or risk committees.
• Hands-on incident response leadership, including incident commander experience.
• Experience managing outsourced security services (MDR/MSSP).
• Working knowledge of modern cloud security controls (Microsoft).
• Bachelor's degree in a related field or equivalent experience.

Responsibilities

• Own the information security strategy, multi-year roadmap, and annual budget.
• Lead security readiness for SEC examinations, audits, client due diligence, and cyber insurance renewals.
• Report program health, top risks, and incidents to executive leadership and the board.
• Own compliance of security controls with SEC Regulation S-P and PCI DSS where applicable.
• Partner with Legal and Compliance on regulatory interpretation and breach decisions.
• Serve as incident commander for security incidents and run tabletop exercises.
• Manage third-party providers and security services to defined service levels.
• Own log management, SIEM retention, vulnerability management, and threat intelligence programs.
• Define security requirements for cloud, SaaS, and data platform initiatives.
• Lead, develop, and grow the information security team and run security awareness training.

Skills

Security leadership

Incident response

Board reporting

Regulatory audits

Cloud security

Vendor management

Executive communication

Education

Bachelor's degree

Tools

Microsoft Entra ID

Microsoft 365

Azure

Cloud security controls

Job description

PTMA, a SEC-registered investment adviser, seeks a VP of Information Security to own strategy, risk, and operations across governance, security architecture, and incident response. This leader will align to the executive team, drive roadmap, manage budgets, and coordinate with Legal, Compliance, and board members.

The role requires senior-level experience in regulated environments, hands-on incident response, and success building security programs that scale with data and AI initiatives.