Chief Security Officer / Governance Director / Risk Lead

10-20 Years

Save

Early Applicant

Job Description

Role Description

Define and lead the organization's enterprise security, governance, and risk management strategy
Establish and enforce governance frameworks, policies, and controls across business and technology functions
Oversee enterprise risk management (ERM), including identification, assessment, mitigation, and reporting of risks
Lead cybersecurity, information security, and physical security strategies where applicable
Ensure compliance with regulatory requirements, industry standards, and internal policies (e.g., ISO, NIST, regulatory frameworks)
Advise executive leadership and board members on risk posture, security threats, and governance effectiveness
Oversee internal audits, compliance reviews, and risk assessments across the organization
Manage incident response, crisis management, and business continuity planning (BCP/DR)
Lead third-party/vendor risk management and due diligence processes
Promote a strong risk-aware and security-focused culture across the organization
Coordinate cross-functional initiatives to align governance, risk, and compliance (GRC) efforts

Qualifications

Bachelor's or Master's degree in Cybersecurity, Risk Management, Business Administration, Law, or related field
10–20+ years of experience in security, governance, risk, or compliance roles, including senior leadership positions
Strong expertise in enterprise risk management, governance frameworks, and regulatory compliance
Deep knowledge of cybersecurity, information security standards, and risk methodologies
Proven experience advising executive leadership and managing board-level reporting
Experience leading large teams and cross-functional initiatives
Strong analytical, strategic thinking, and decision-making skills
Excellent communication, negotiation, and stakeholder management abilities
Relevant certifications such as CISSP, CISM, CRISC, CGEIT, or similar are highly preferred
High integrity, leadership presence, and ability to manage complex organizational risks