[Hiring] Vice President, Cybersecurity, Risk & Compliance @International Data Group

Role Description

IDC's CIO organization is shifting from project-by-project security review to a pre-cleared, guardrail-based model so that new technology — including AI pilots — can ship in days instead of months. This role owns that shift: building the security architecture, controls, and governance that let the business move fast without moving recklessly.

The VP, Cybersecurity, Risk & Compliance serves as Deputy CISO, leading enterprise security strategy, architecture, and operations for IDC day to day and standing in for the CISO on internal leadership, vendor, and operational matters. The role carries direct accountability for keeping pace with an accelerating delivery model across infrastructure, applications, and AI/automation initiatives.

This is a hands-on leadership role: the VP sets the security roadmap, runs the team, and personally removes the friction that slows delivery — replacing per-project security gatekeeping with pre-approved patterns, standing guardrails, and fast, decisive risk calls.

What You’ll Do

• Strategy, architecture, and governance:
  • Own the enterprise cybersecurity strategy and multi-year architecture roadmap, aligned to business and AI/automation priorities.
  • Design and maintain a library of pre-approved security patterns and guardrails so new projects and pilots can launch without a bespoke review cycle.
  • Support the AI Governance Council as the security authority, pre-clearing model, data, and vendor patterns rather than gating individual pilots.
• AI and platform security:
  • Lead security for IDC's AI platforms and pilots — prompt-injection defense, runtime AI protection, agentic SOC coverage, PII detection, and red-team/canary testing.
  • Partner with the AI & Automation team to build security into the 5-day intake-to-ship pilot lifecycle from day one.
  • Own identity and access management, zero-trust architecture, and SSO/SAML standards across the enterprise application portfolio.
• Security engineering:
  • Own the security engineering function, including Quanta Cyber Guidance — the secure-by-design reference architecture and build standards for IDC's Quanta platform.
  • Own the enterprise penetration testing program (internal, external, and third-party engagements) across Quanta and the broader application portfolio.
  • Build and maintain secure coding standards and embedded security tooling (SAST/DAST, dependency and vulnerability scanning).
• Enterprise risk management:
  • Own the enterprise technology risk register, driving risk identification, quantification, and mitigation tracking across infrastructure, applications, and AI initiatives.
  • Set risk appetite and tolerance thresholds with the CIO and executive leadership.
  • Author and maintain enterprise security and risk policies, standards, and control frameworks.
• Compliance and audit:
  • Drive certification and regulatory compliance programs (SOC 2 Type II, ISO 27001, GDPR, and market-specific frameworks).
  • Own the enterprise audit calendar, serving as the primary liaison to internal and external auditors.
  • Manage vendor security and compliance risk assessments against committed SLAs.
• Security operations:
  • Own incident response, threat detection, and security logging/monitoring across the global estate.
• Leadership and reporting:
  • Serve as Deputy CISO, acting with full authority on the CISO's behalf across day-to-day security, risk, and compliance decisions.
  • Build, lead, and develop a global cybersecurity, risk, and compliance team.
  • Partner with the CISO to prepare risk posture, compliance status, and audit program health.
  • Partner with Infrastructure, Applications, and Data leadership to embed security and compliance checkpoints directly into CI/CD and rapid deployment pipelines.

Qualifications

• 12+ years in cybersecurity, including 5+ years in a senior leadership role.
• Experience operating as a deputy or right hand to a CISO or equivalent security executive.
• Demonstrated experience securing SaaS, cloud, and AI/LLM platforms at enterprise scale.
• Direct ownership of an enterprise technology risk management program.
• Working knowledge of major compliance frameworks (SOC 2, ISO 27001, GDPR).
• Hands-on experience with modern threat defense tooling, zero-trust architecture, and identity management.
• Experience owning a security engineering practice.
• A track record of balancing security rigor with delivery speed in agile, DevOps, or CI/CD.
• Bachelor’s degree in computer science, Information Security, or related field; CISSP, CISM, or equivalent certification preferred.

Preferred qualifications

• Direct experience securing generative AI or LLM-based products.
• Experience in a multinational, research, or information-services business.
• Experience designing a governance model that pre-clears risk categories.
• Exposure to global regulatory environments, including operating in or adjacent to the Chinese market.
• Experience with GRC platforms and leading external audit engagements.

Success looks like (first 12 months)

• A published library of pre-approved security patterns is in active use.
• SOC 2 Type II and ISO 27001 programs are on track against agreed timelines.
• AI pilots ship through the standard lifecycle with security built in from intake.
• Vendor risk reviews consistently meet SLA.
• The enterprise risk register is current and actively used to drive prioritization.

What We Offer

• 15 vacation days (prorated based on start date).
• 12 company-paid holidays.
• 6 paid sick days (prorated based on start date; may vary by state).
• Medical, dental, and vision coverage.
• 2 floating holidays (prorated based on start date).
• 1 volunteer day.
• 401(k) company match (IDC matches 3% on the first 6% of employee contributions).
• Company-paid short-term disability.
• Company-paid life insurance.
• Company-paid parental leave.

Compensation Transparency

At IDC, we are committed to fair and equitable pay practices. The base salary range for this role is $165,800 USD – $290,220 USD annually, depending on location and experience. This role is also eligible for a variable incentive of up to 25% of base salary.

Equal Opportunity Employer

IDC is committed to providing equal employment opportunities for all qualified persons. Employment eligibility verification required. We participate in E-Verify.