Chief Information Security Officer
Job Description
VP / Chief Information Security Officer - $300,000 - $360,000 + 20% bonus
\n
\n
Herndon, VA | Hybrid
\n
\n
A large global software company is seeking a transformative VP / Chief Information Security Officer to lead enterprise, product, cloud, cyber-risk, and AI security.
\n
This is a strategic business-partnering role—not a controls-only position. The CISO will help the company move faster with confidence by embedding security across Product, Engineering, IT, Sales, Services, Legal, Finance, and corporate functions.
\n
\n
The opportunity
\n
You will:
\n
- \n
- Define enterprise security strategy, risk appetite, operating model, and investment priorities
- Lead security operations, threat detection, vulnerability management, incident response, crisis management, and cyber resilience
- Advance product and application security through secure-by-design, threat modeling, secure SDLC, and software supply-chain practices
- Build an AI security and governance program covering responsible AI use, sensitive data, AI agents, model and prompt security, AI-generated code, third-party providers, and emerging threats
- Strengthen customer trust, audit readiness, third-party risk, privacy partnership, and regulatory preparedness
- Establish executive and Board-level security metrics focused on business risk, resilience, customer confidence, and AI readiness
- Build and develop a high-performing, collaborative security organization
\n
\n
\n
\n
\n
\n
\n
\n
\n
Your first-year impact
\n
You will establish the enterprise security baseline, identify the highest-risk systems and AI use cases, improve remediation and incident response, clarify security ownership across distributed teams, and deliver a prioritized roadmap balancing risk reduction, investment, customer commitments, and business speed.
\n
\n
Ideal background
\n
You have already served as a CISO, enterprise-wide Deputy CISO, or VP of Security in a global software, SaaS, or technology company. You bring experience across product security, cloud-native environments, application security, identity, security engineering, detection and response, software supply-chain risk, customer assurance, AI governance, and executive communication.
\n
Most importantly, you know how to challenge leaders constructively, make risk-based decisions, and position security as an enabler of trusted growth.