CrawlJobs Logo
Carex Consulting Group Logo Carex Consulting Group · IT - Administration

VP, Information Security

United States, Madison · Job Posted May 15, 2026
Apply Position
Job Link Share

Job Description

Carex is partnering with a Financial Services industry partner to identify a VP, Information Security to lead the strategic development and execution of a multi-year information security roadmap aligned to enterprise risk management and business objectives. This role provides executive leadership across security strategy, governance, operations, and regulatory alignment, while building a high-performing security organization and promoting a culture of shared responsibility for protecting data and systems.

Job Responsibility

  • Lead the development and execution of a multi-year information security strategy aligned with business priorities and regulatory requirements
  • Build, mentor, and lead a high-performing information security team while fostering enterprise-wide security accountability
  • Establish and mature security governance, risk management, and control frameworks aligned with recognized industry standards
  • Provide executive-level reporting on security posture, risk exposure, and remediation progress
  • Partner closely with Legal, Compliance, and Privacy leadership to align security controls with regulatory obligations and financial services requirements
  • Support regulatory examinations, audits, and legal reviews related to cybersecurity and data protection
  • Oversee enterprise security operations, including threat detection, vulnerability management, endpoint protection, and incident response
  • Lead breach response coordination and tabletop exercises involving executive and cross-functional stakeholders
  • Establish and maintain secure cloud architectures across IaaS, PaaS, and SaaS environments
  • Strengthen identity and access management across hybrid and cloud environments using modern security principles
  • Oversee third-party risk management, including vendor security assessments and contractual cybersecurity requirements

Requirements

  • Extensive experience developing and executing enterprise-wide information security strategies for mid to large organizations
  • Proven senior leadership experience with accountability for security governance, risk management, and operational execution
  • Deep knowledge of financial services regulations, privacy laws, and security frameworks such as NIST CSF, ISO 27001, CIS Controls, or comparable standards
  • Demonstrated expertise in threat management, vulnerability management, security operations, and modern ransomware defense strategies
  • Strong hands-on experience with cloud security architecture across IaaS, PaaS, and SaaS platforms, including identity and access management and zero-trust concepts
  • Experience leading enterprise incident response efforts in collaboration with executive leadership, Legal, Compliance, and Privacy teams
  • Background designing and overseeing third-party risk management programs and vendor security assessments
  • Bachelor’s degree required
  • Professional security certification such as CISSP strongly preferred

Nice to have

Advanced degree in cybersecurity or a related field

Carex Consulting Group - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

VP, Information Security

8 matching positions

Vp Of Information Security & Risk Management

We are looking for an accomplished security executive to lead the organization’s...
Location
Location
United States , Nashville
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive leadership experience in information security, cybersecurity, risk management, or a closely related executive function
  • Demonstrated success creating enterprise security strategies and translating them into scalable programs and operational results
  • Strong knowledge of governance, risk, and compliance practices, including policy development, control oversight, and audit support
  • Experience leading executive-level incident response coordination and working across technical and business teams during high-impact events
  • Ability to engage effectively with senior leadership, clients, vendors, legal teams, and cross-functional stakeholders on security and risk matters
  • Familiarity with core security technologies and concepts, including network security tools such as Cisco ASA Firewall and broader cyber defense practices
  • Proven leadership capabilities in building teams, developing talent, and driving accountability within complex organizational environments
  • Working knowledge of IT strategy and the ability to collaborate within Agile Scrum or similarly structured delivery environments
Job Responsibility
Job Responsibility
  • Develop and lead a company-wide information security and risk management roadmap that supports strategic business objectives and long-term growth
  • Convert executive priorities into practical security programs, measurable initiatives, and effective control frameworks across the enterprise
  • Establish meaningful performance and risk metrics to evaluate security maturity, track progress, and inform leadership decisions
  • Direct governance, risk, and compliance activities by maintaining policies, standards, and control practices that meet regulatory and organizational expectations
  • Oversee audit preparation, regulatory reviews, and corrective action plans to ensure timely remediation and sustained compliance
  • Provide executive leadership during cybersecurity incidents by guiding escalation, communication, containment, and recovery efforts
  • Lead senior security teams responsible for monitoring threats, managing vulnerabilities, and reducing enterprise risk through coordinated operational execution
  • Represent the organization in security-related discussions with clients, vendors, and business partners, including assessments, due diligence, and contractual security matters
  • Build and develop a high-performing security leadership structure by mentoring managers and directors, setting priorities, and aligning resources to business needs
What we offer
What we offer
  • medical
  • vision
  • dental
  • life and disability insurance
  • 401(k) plan
  • Fulltime
Read More
Arrow Right

VP of Information Security & Risk Management

We are looking for an accomplished security executive to lead the organization’s...
Location
Location
United States , Nashville
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive leadership experience in information security, cybersecurity, risk management, or a closely related executive function
  • Demonstrated success creating enterprise security strategies and translating them into scalable programs and operational results
  • Strong knowledge of governance, risk, and compliance practices, including policy development, control oversight, and audit support
  • Experience leading executive-level incident response coordination and working across technical and business teams during high-impact events
  • Ability to engage effectively with senior leadership, clients, vendors, legal teams, and cross-functional stakeholders on security and risk matters
  • Familiarity with core security technologies and concepts, including network security tools such as Cisco ASA Firewall and broader cyber defense practices
  • Proven leadership capabilities in building teams, developing talent, and driving accountability within complex organizational environments
  • Working knowledge of IT strategy and the ability to collaborate within Agile Scrum or similarly structured delivery environments
Job Responsibility
Job Responsibility
  • Develop and lead a company-wide information security and risk management roadmap that supports strategic business objectives and long-term growth
  • Convert executive priorities into practical security programs, measurable initiatives, and effective control frameworks across the enterprise
  • Establish meaningful performance and risk metrics to evaluate security maturity, track progress, and inform leadership decisions
  • Direct governance, risk, and compliance activities by maintaining policies, standards, and control practices that meet regulatory and organizational expectations
  • Oversee audit preparation, regulatory reviews, and corrective action plans to ensure timely remediation and sustained compliance
  • Provide executive leadership during cybersecurity incidents by guiding escalation, communication, containment, and recovery efforts
  • Lead senior security teams responsible for monitoring threats, managing vulnerabilities, and reducing enterprise risk through coordinated operational execution
  • Represent the organization in security-related discussions with clients, vendors, and business partners, including assessments, due diligence, and contractual security matters
  • Build and develop a high-performing security leadership structure by mentoring managers and directors, setting priorities, and aligning resources to business needs
What we offer
What we offer
  • medical
  • vision
  • dental
  • life and disability insurance
  • 401(k) plan
  • free online training
  • Fulltime
Read More
Arrow Right
New

Vp Information Technology

The Vice President of Information Technology (VP IT) oversees the strategic plan...
Location
Location
United States , Ontario
Salary
Salary:
260000.00 - 280000.00 USD / Year
ajinomotofoods.com Logo
Ajinomoto Foods North America, Inc.
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 4 Year / Bachelors Degree in Information Technology, Computer Science, Engineering, or a related field required
  • Master’s degree and/or relevant executive education preferred
  • 12+ years of progressive IT experience, including 7+ years leading multiple disciplines (governance, delivery, operations, infrastructure, and/or security) in a complex, multi-site environment
  • Demonstrated ability to translate strategy into a governed, multi-year portfolio and deliver measurable outcomes through disciplined prioritization, financial management, and execution rigor
  • Broad technical leadership across infrastructure and cloud services, cybersecurity and risk management, IT service management, and business applications
  • experience supporting 24x7 operational environments (e.g., plants/warehouses) preferred
  • Executive presence and communication skills, with the ability to influence across functions, present to senior leaders, and build alignment on priorities, risk, and investment trade-offs
  • Track record of leading technology transformation, improving service performance, and maturing governance, controls, and operating rhythms in a customer-focused IT organization
  • Experience with IT budgeting, forecasting, vendor/contract management, and managed-services performance oversight, including driving cost optimization and service quality
  • Proven ability to lead through senior leaders and build a high-performing management team through coaching, performance management, and succession planning
Job Responsibility
Job Responsibility
  • Drive execution of the enterprise IT operating plan aligned to our long-term Road Map through the IT leadership team, ensuring technology capabilities support safety, quality, service, growth, and cost performance
  • Partner with the CIO and business leadership to refine strategy, set investment priorities, and run the portfolio governance needed to translate direction into executable roadmaps for IT leaders
  • Establish and sustain, through IT leaders, a customer-focused engagement and demand-management model (intake, prioritization transparency, communications, and satisfaction measures) to improve trust, alignment, and service outcomes across corporate and plant stakeholders
  • Ensure IT leaders convert business priorities into funded roadmaps and delivered outcomes, driving adoption and value realization (e.g., productivity, cycle time, uptime, and decision-quality improvements)
  • Ensure IT governance, standards, and policy lifecycle are defined and followed through the IT leadership team to strengthen security, compliance, audit readiness, and scalable delivery
  • maintain clear risk decisioning and escalation paths and an operating cadence for controls, reviews, and remediation
  • Ensure adherence to enterprise technology standards and reference architectures (e.g., cloud, network, endpoint, identity, integration), including a clear process for exceptions, so solutions are scalable, supportable, cost-effective, and secure by design
  • Ensure KPIs/SLAs are defined, reviewed, and acted on (e.g., availability, incident response, project delivery, security posture), using governance forums to drive continuous improvement and provide clear, executive-ready reporting
  • Ensure end-to-end IT service performance through disciplined ITSM practices (incident/problem/change management) and strong service ownership by IT leaders, including infrastructure reliability, application support, and cybersecurity controls—delivering availability, resilience, and a strong end-user experience
  • Ensure disaster recovery and business continuity capabilities are defined, tested on a regular cadence, and improved through responsible leaders, with clear recovery objectives and measurable readiness for critical services
  • Fulltime
Read More
Arrow Right

Information Security Lead

We’re hiring a Lead of Information Security, reporting to the VP of Technical Op...
Location
Location
United States , Philadelphia
Salary
Salary:
Not provided
Proscia
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience in information security, including direct experience improving, and contributing to GRC programs
  • Proven expertise in regulatory frameworks such as ISO 27001, SOC 2, GDPR, HIPAA, FedRAMP, TX-RAMP, StateRAMP or similar
  • Hands-on experience with vulnerability management tools, incident response, and security audits
  • Experience embedding security into software development lifecycles—DevSecOps principles applied in practice
  • Experience selecting, implementing, and managing security tooling (e.g., XDR, SIEM, endpoint, code scanning, etc.)
  • Exceptional communication and influencing skills across technical and non-technical teams
  • A high degree of autonomy and ownership—comfortable leading cross-functional efforts and prioritizing in a dynamic environment
  • You already use AI tools in your security work—for policy drafting, threat analysis, log review, control validation, or however it fits your practice
  • Experience with cloud-native environments (AWS preferred)
  • Experience building with or on top of LLMs, AI agents, or agentic pipelines
Job Responsibility
Job Responsibility
  • Manage and evolve vulnerability management— tooling, reporting, and remediation governance
  • Serve as a consultative security leader for Engineering, Product, and Customer teams—governing system designs, architecture, and implementation through a security-first lens
  • Implement AI native tooling to improve detection and response capabilities without incurring an increased demand on resources
  • Partner with Engineering to implement developer-friendly security tools that improve security posture and reduce compliance burdens without slowing velocity
  • Oversee incident response preparation, processes, and execution—ensuring coordinated action, effective communication, and the kind of thorough post-incident analysis that prevents the same problem twice
  • Under the direction VP, TechOps, improve the Proscia Information Security Program, with a focus on governance, risk, and compliance (GRC) across the Concentriq suite of applications and Proscia’s business applications
  • Contribute to security policy development across regulated and non-regulated markets—implementing agentic workflows where it accelerates your research and stress-testing, iterating with stakeholders, and maintaining the rigor and compliance standards our customers expect
  • Influence and execute on the company’s regulatory roadmap—seeking new certifications and frameworks (e.g., ISO 27001, SOC 2, HITRUST) in response to customer and market demands
  • Enable other teams to answer security-related questions from customers, prospects, and partners providing expert information security guidance
  • Anticipate and adapt to industry and regulatory trends, including how AI is reshaping both the threat landscape and the defender’s toolkit—and surface emerging requirements before they become urgent
What we offer
What we offer
  • Competitive pay
  • Savings options
  • Schedule options
  • Insurance options that promote long-term health and personal growth
  • Office environment designed for creativity and agility with walls as notepads and couches for collaboration
  • Located in the heart of Philadelphia with views of the city
  • Fulltime
Read More
Arrow Right

Vp, Information Technology Planning and Delivery

Associa is seeking a role of VP Information Technology Planning and Delivery to ...
Location
Location
United States , Richardson
Salary
Salary:
Not provided
associaonline.com Logo
Associa
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in relevant field
  • 15+ years of progressive IT leadership experience, including senior management roles
  • Demonstrated success leading enterprise-scale technology programs and transformations
  • Experience reporting to or partnering closely with C-suite and executive leadership
  • Familiarity with enterprise delivery frameworks (e.g., Agile, hybrid, waterfall) and modern SDLC practices
  • Hands-on leadership in modernization initiatives (cloud migration, ERP transformation, data & analytics platforms)
  • Experience implementing or governing AI-enabled solutions or advanced analytics platforms
  • Experience operating in large, complex, multi-site enterprises
  • Prior ownership of enterprise PMO alignment and delivery governance at scale
  • Experience driving Agile / DevOps transformation across multiple teams or portfolios
Job Responsibility
Job Responsibility
  • Mobilize, drive and execute multi-year IT strategies aligned with enterprise business objectives and growth plans
  • Establish and oversee IT delivery governance frameworks, standards and policies leveraging practices such as ITIL, COBIT, AI, etc. as applicable
  • Serve as a strategic advisor to executive leadership on technology investments, risks, and opportunities
  • Ensure compliance with IT security, regulatory, and risk management requirements
  • Drive definition and roadmap of digital transformation initiatives, including M&A integrations, modernization of platforms, applications, and data capabilities with corresponding change management required
  • Lead program executive communication and cadence through best practices including steering committees, routine status and tracking, escalations, change control, documentation, etc.
  • Partner with internal and external cross functional transformation leadership to align and drive successful implementation plans
  • Partner with CFO on program financials including ongoing business case management, spend tracking, revenue assumptions and change controls
  • Partner with the Program Management Office to align with enterprise governance expectations
  • Partner with HR leadership on program resourcing including ongoing resource planning, tracking and requirements
Read More
Arrow Right

Vp - Ai Security & Risk Manager

The Technology department at our client is responsible for creating and continuo...
Location
Location
United States , New York
Salary
Salary:
150000.00 - 175000.00 USD / Year
rennerbrown.com Logo
Renner Brown
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Security, Data Science, or a related field
  • advanced degree a plus
  • At least 7–10 years of experience in information security, technology risk, or a related field, with a minimum of 3 years focused on AI systems, machine learning security, or AI governance
  • Deep understanding of the AI and LLM landscape, including foundation model architecture, agentic systems, RAG pipelines, and the risk implications of each
  • Hands-on experience evaluating AI platforms and products, including the ability to assess vendor claims about model behavior, data handling, and security controls with appropriate skepticism
  • Familiarity with AI risk frameworks and emerging standards, including NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and ISO/IEC 42001
  • Experience with vendor risk management in a regulated financial services environment, including contract negotiation support and third-party security assessments
  • Knowledge of relevant regulatory frameworks including DORA, SOX, SEC cybersecurity disclosure rules, and GDPR/CCPA as they apply to AI data flows
  • Strong technical skills sufficient to evaluate AI system architecture, API security, data pipeline design, and access control models without reliance solely on vendor documentation
  • Excellent communication skills, with the ability to translate highly technical AI risk concepts into clear, decision-ready language for senior leadership, Legal, and Compliance
Job Responsibility
Job Responsibility
  • Own and maintain the firm's AI risk framework, covering model risk, data privacy, adversarial threats, third-party AI, and regulatory compliance
  • Develop and enforce AI usage policies in collaboration with Legal and Compliance, including acceptable use, data classification requirements, and prompt handling standards
  • Maintain an inventory of AI tools deployed firm-wide — both sanctioned and shadow — and assess associated risk profiles
  • Provide regular AI risk reporting to the Head of Technology Risk and senior leadership, including emerging threat trends, vendor posture changes, and control gaps
  • Monitor the evolving regulatory environment for AI (EU AI Act, SEC guidance, DORA, NY DFS) and advise on compliance obligations and required controls
  • Lead security and risk assessments of vendors introducing AI capabilities into existing or new platforms, including evaluating model transparency, data handling practices, and auditability
  • Develop and maintain a structured AI vendor evaluation framework, incorporating criteria for model governance, output reliability, data residency, and incident response obligations
  • Partner with Procurement and Legal to ensure AI-specific provisions are reflected in vendor contracts, including data usage restrictions, model change notifications, and liability terms
  • Maintain a tiered risk register of third-party AI integrations, with ongoing monitoring for material changes to vendor AI functionality, architecture, or ownership
  • Engage directly with vendor security and product teams to assess AI-related controls and drive remediation of identified gaps
  • Fulltime
Read More
Arrow Right
New

Sr Product Manager, T-Platform

Location
Location
United States , Multiple locations
Salary
Salary:
121600.00 - 219400.00 USD / Year
https://www.t-mobile.com Logo
T-Mobile
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's Degree plus 7 years of related work experience OR Advanced degree with 5 years of related experience
  • 7+ years of relevant Product Management experience in an agile software product development environment
  • Advanced level understanding of customer experience
  • Backlog Management
  • Business Acumen
  • Customer Experience Design
  • Data Analysis
  • Financial Modeling
  • Go-to-Market Strategies
  • Product Management
Job Responsibility
Job Responsibility
  • Owns product end to end for complex or cross-platform solutions for products of the highest level of complexity and scope, or family of products
  • Identifies target customer(s) for existing or future products, and designs and drives end user product research
  • Partners with business, internal/external stakeholders and Leadership to understand current customer experiences, identifies areas of opportunity
  • Conducts analysis of quantitative and qualitative data to identify product innovation opportunities or root cause of issues, and assess opportunity size and impact
  • Leverages rapid hypothesis driven testing methodologies and experiments to inform direction, prioritize investment
  • Conducts cost-benefit / ROI / NPV analysis, competitive product analysis, to support decision making
  • Works with stakeholders and follows enterprise process to secure and maintain product funding
  • Anticipates industry trends, direction, innovation, analyses potential impacts or opportunities to customer / product, and incorporates analyses into product process
  • Communicates, influences, and sells ideas at VP level and below
  • Drives specific ad hoc analysis and presents information to executive level management on request
What we offer
What we offer
  • competitive base salary and compensation package
  • annual stock grant
  • employee stock purchase plan
  • 401(k)
  • free, year-round money coaches
  • medical, dental and vision insurance
  • flexible spending account
  • paid time off and up to 12 paid holidays
  • paid parental and family leave
  • family building benefits
  • Fulltime
Read More
Arrow Right
New

System Engineering Specialist Advisor

Location
Location
India , Noida
Salary
Salary:
Not provided
nttdata.com Logo
NTT DATA
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 15+ years of progressive experience in enterprise endpoint management with at least 8+ years in senior/lead roles
  • Minimum 10 years of hands-on SCCM/MECM administration and architecture experience
  • Minimum 5 years of Microsoft Intune / Modern Endpoint Management design and delivery experience
  • Demonstrated experience leading technical teams of 5+ engineers across multi-client delivery contexts
  • Track record of successful client-facing engagements at Director / VP-IT level
  • Prior experience in managed services, IT outsourcing, or SI/consulting delivery models preferred
  • B.E. / B.Tech in Computer Science, Information Technology, or a related engineering discipline
  • MCA or equivalent postgraduate qualification considered in lieu of engineering degree with commensurate experience
Job Responsibility
Job Responsibility
  • Serve as the definitive technical authority for MECM/SCCM CB (Current Branch) design, architecture, and governance across client environments
  • Lead greenfield SCCM infrastructure deployments, CB upgrade programmes, and site hierarchy redesigns for enterprise-scale clients
  • Architect and govern Software Update (SUP), Application Management, OS Deployment (OSD), and Endpoint Protection workloads at scale
  • Define and enforce patch compliance frameworks, WSUS topology, ADR and maintenance window policies aligned to client SLAs
  • Lead complex OSD and task sequence engineering for Windows 11 migrations, hardware refresh cycles, and golden image pipelines
  • Govern SCCM boundary, boundary group, and content distribution architecture for geographically dispersed enterprise estates
  • Act as the escalation authority for all Priority-1/Priority-2 SCCM incidents, driving root cause analysis and permanent resolution
  • Lead SCCM-to-Intune co-management or full migration engagements — discovery, roadmap development, phased execution, and post-migration stabilisation
  • Review and approve all significant SCCM change requests (CRs) within client change management processes
  • Lead Modern Endpoint Management (MEM) architecture across Microsoft Intune for Windows 10/11, iOS, Android, and macOS device fleets
Read More
Arrow Right