VP Information Security

Kforce has a client in Phoenix, AZ that is seeking a Vice President of Information Security to lead its enterprise information security program. This individual will oversee security strategy, operations, cyber risk management, and a multidisciplinary security team. Responsibilities:

• Develop and execute a multi-year information security strategy aligned with business priorities and regulatory requirements
• Lead, develop, and retain a high-performing security organization
• Oversee security architecture, operations, incident response, IAM, data protection, vulnerability management, and third-party cyber risk
• Establish security standards across cloud, infrastructure, networks, endpoints, SaaS, and applications
• Lead major cybersecurity incidents and recovery efforts
• Manage security budgets, vendors, and managed service providers
• Partner across Technology, Compliance, Legal, Risk, Audit, and Privacy
• Support regulatory examinations and audits
• Provide cybersecurity risk reporting to executive leadership
• Assess emerging risks, including AI and generative AI

Requirements:

• Bachelor's degree in Information Security, Computer Science, Information Systems, Business, or a related field, or an equivalent combination of education and relevant professional experience
• Progressive information security leadership experience managing multidisciplinary teams
• Experience building or maturing enterprise security programs
• Leadership experience within financial services or another highly regulated industry
• Experience with NIST CSF, CIS Controls, or ISO 27001
• Experience leading significant cybersecurity incidents
• Experience managing budgets, vendors, and managed security services
• Technical depth across security architecture, cloud security, incident response, IAM, data protection, and/or application security
• Ability to communicate technical risk to executives, boards, auditors, and regulators

Preferred:

• Relevant professional certifications, such as CISSP, CISM, CISA, CCSP, or GIAC, are preferred
• Experience with wealth management platforms, custodial integrations and advisor-facing technology. Experience supporting cybersecurity-related regulatory examinations, internal and external audits, and assurance activities applicable to financial-services firms
• Experience leading security in an organization where the role requires enterprise strategy, executive influence, technical judgment, team development and practical execution
• Exposure to AI governance and securing AI-enabled applications