Securance Consulting · 8 hours ago
Information Security Officer
Securance Consulting is seeking an Information Security Officer who will serve as the senior cybersecurity leader responsible for aligning the organization’s information security program with business strategy and regulatory obligations. This role involves providing executive-level advisory support, owning the enterprise security roadmap, and ensuring cybersecurity capabilities protect critical assets while guiding governance and risk management efforts.
Cyber SecurityInformation ServicesInformation Technology
Responsibilities
Serve as a trusted advisor to executive leadership on cybersecurity risk, strategy, and investment priorities
Align information security strategy with organizational business objectives and mission requirements
Participate in enterprise governance, risk, and compliance committees
Translate technical cybersecurity risk into business impact language for leadership decision-making
Own the multi-year cybersecurity roadmap and maturity improvement plan
Direct the development, implementation, and continuous improvement of enterprise information security programs
Own enterprise risk prioritization, ensuring mitigation efforts align with business impact
Oversee security policies, standards, and control frameworks
Ensure alignment with regulatory, contractual, and industry security requirements
Lead security operations, vulnerability management, incident response coordination, and continuous monitoring activities
Ensure security controls are operating effectively across on-premises, cloud, and hybrid environments
Oversee third-party risk management and supply chain security governance
Direct remediation validation and control effectiveness measurement
Manage and mentor a multi-disciplinary technology and security team
Establish performance objectives, professional development, and succession planning
Promote a culture of accountability, collaboration, and continuous improvement
Own security program budgeting, forecasting, and investment planning
Prioritize resource allocation based on enterprise risk exposure and strategic objectives
Evaluate technology investments and service providers
Develop executive dashboards and board-level reporting
Present risk posture, trends, and program maturity to leadership
Support audits, assessments, and regulatory examinations
Qualification
Required
Bachelor's degree in Management Information Systems, Computer Science, Engineering, or a closely related field
Minimum of five (5) years implementing and managing IT security programs and controls in an enterprise environment
Minimum of three (3) years managing and leading a technology or cybersecurity team
Demonstrated experience aligning cybersecurity programs with organizational business strategy
Experience supporting executive leadership and governance bodies
One or more of the following certifications required or strongly preferred: CISSP, CISM, GSEC, PMP
Enterprise cybersecurity governance
Business-aligned risk management
Executive communication and advisory skills
Strategic planning and roadmap development
Program and portfolio management
Regulatory and compliance leadership
Team leadership and development
Preferred
Experience in regulated environments
Experience presenting to executive leadership or boards
Experience managing enterprise risk programs
Experience leading multi-year cybersecurity transformation initiatives