Chief Information Security Officer

Job Summary

The successful candidate must have hands-on experience in information security technology, cloud and on-premises environments, digital marketing and CRM platforms, application security and code review, vulnerability testing, and leading enterprise level risk management programs. Previous experience delivering GDPR compliancy is preferred.

Duties of the Chief Information Security Officer:

• Lead the implementation of robust data protection measures, including encryption, access control, and data classification to safeguard customer information from unauthorized access or breaches.


• Secure engineering processes and the software development lifecycle by implementing security measures such as code review, vulnerability testing, security education, and establishing devsecops practices.


• Protect the security of our customer data platform(s) and validate compliance with all security and data privacy requirements.


• Establish and validate the organization's compliance with international data protection standards, such as GDPR and CCRA.

• Participate in the legal process of reviewing vendor contracts, identifying security and data-related risks as a CISO.


• Assess and mitigate cybersecurity risks, proactively identify vulnerabilities, and implement appropriate controls.


• Collaborate with cross-functional teams throughout the league to align security initiatives with our business objectives and legal requirements.


• Lead cyber security incident response efforts across the organization, including establishing procedures, conducting investigations, implementing remediation, and managing post-incident reviews.


• Produce and present comprehensive reporting on all aspects of our Information Security Program.


• Stay up to date with the latest industry trends, emerging threats, and standard methodologies in information security.


• Additional responsibilities as assigned.