Confidential ยท 16 hours ago
Chief Information Security Officer
Greater Boston
Full-time
Hybrid
Director/Executive
10+ years expConfidential is a global technology organization serving enterprise clients, and they are seeking an experienced Chief Information Security Officer (CISO). The CISO will define and lead the company's global information security program, ensuring strong cyber resilience and effective protection of platforms, data, and customer environments.
Staffing & Recruiting
Responsibilities
Establish a modern, forward-looking enterprise security strategy aligned with business objectives and emerging threat trends
Develop and maintain security policies, standards, and practices across infrastructure, applications, and operations
Ensure compliance with global data protection and privacy regulations
Align the security program with widely adopted industry frameworks such as ISO 27001, NIST CSF, or similar
Implement an effective governance model to measure, manage, and report on security risk
Partner with senior leaders to integrate cyber risk management into enterprise risk processes
Provide functional oversight and strategic guidance to security personnel across multiple regions
Present clear, business-aligned security metrics and findings to executive leadership
Lead key security programs including identity management, vulnerability management, threat detection, incident response, and cloud security initiatives
Partner with technology, product, and engineering teams to embed secure-by-design practices across the software lifecycle
Drive company-wide awareness and training programs to strengthen security culture and reduce human risk
Oversee incident response readiness and ensure continuous improvement of recovery and resilience plans
Qualification
Required
10+ years of progressive experience in Information Security, with at least 5 years in a CISO or senior security leadership role within a global technology or enterprise software organization
Strong ability to define enterprise security strategy and communicate risk posture to executive stakeholders
Deep working knowledge of major security frameworks (e.g., ISO 27001, NIST, CIS Controls)
Experience leading distributed security teams and programs across multiple geographic regions
Strong understanding of cloud security models (AWS, Azure, or GCP), application security, DevSecOps practices, and modern data protection methods
Preferred
Master's degree in Information Security, Computer Science, Engineering, or a related discipline preferred
Professional certifications such as CISSP, CISM, or CISA preferred
Company
Confidential
Centralizing All Types Of Next Opportunities For You In One Place.
Vancouver, US
2-10 employeesFunding
Current Stage
Early StageCompany data provided by crunchbase