Vice President of Information Security

Role Overview

The Vice President of Information Security is a senior leadership role performed remotely on a full-time basis. This position is accountable for steering the organization's comprehensive information security strategy and operational execution. Responsibilities encompass developing, applying, and continuously enhancing security policies, standards, and controls throughout all technological and business landscapes.

Daily functions include managing cybersecurity initiatives, coordinating vulnerability assessments and their remediation processes, and safeguarding critical applications and data assets. The role requires close collaboration with executive leadership, IT teams, and business stakeholders to ensure alignment of security programs with corporate goals, regulatory demands, and risk thresholds.

The Vice President additionally drives incident response activities, manages business continuity and disaster recovery planning and testing, and regularly presents detailed reports on the organization's security stance and associated risks to senior management.

Qualifications and Skills

• Proven expertise in leading information security management and cybersecurity efforts, including the design and execution of enterprise-wide security strategies and programs.
• Strong capabilities in application security, emphasizing secure software development practices, risk evaluation of applications, and protection of essential banking systems.
• Competence in vulnerability management processes, such as vulnerability scanning, prioritization, remediation oversight, and ongoing monitoring.
• Experience in business continuity planning, including establishing, testing, and maintaining disaster recovery and resilience frameworks.
• Demonstrated extensive leadership experience within information security or risk management, preferably in financial services or other heavily regulated sectors.
• Deep knowledge of applicable regulations, standards, and frameworks like ISO 27001, NIST, GDPR, and PCI DSS, with a proven track record in ensuring adherence.
• Excellent communication and stakeholder engagement skills, capable of translating complex technical risks into accessible business language.
• A bachelor's or master's degree in Information Security, Computer Science, Information Systems, or related disciplines; relevant industry certifications such as CISSP, CISM, or CRISC are strongly advantageous.