Chief Information Security Officer (CISO)
Core
Lead enterprise cybersecurity strategy, security operations, and governance, risk, and compliance for a publicly traded insurance carrier.
Role type
Executive CISO (regulated financial services)
Builds
Enterprise security posture, regulatory compliance programs, and risk management frameworks
Domain
Insurance / FinTech / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cybersecurity strategy, Security operations (SOC), Incident response, Vulnerability management, SOC 2 compliance, GRC (Governance, Risk, Compliance), Identity governance, Privacy strategy, Third-party risk management, Regulatory compliance (state/federal), Board reporting
Preferred skills
Insurtech experience, Fintech experience, Healthcare security experience, SEC disclosure experience
Technologies
None explicitly listed
Responsibilities
Develop and execute enterprise cybersecurity strategy aligned with business risk appetite; Build and lead security operations including threat detection and incident response; Own SOC 2 program end-to-end; Lead GRC function and maintain risk register; Drive compliance with state and federal cybersecurity regulations; Support SEC cybersecurity disclosure obligations; Lead identity governance and access certification; Own privacy and data protection compliance strategy; Manage third-party cybersecurity risk program; Report to Board of Directors on cybersecurity posture