[Hiring] VP/CISO, Information Security @EagleView

Role Description

The VP, Information Security will build a modern, scalable, and resilient security program, ensuring strong protection of:

• Enterprise systems and cloud infrastructure
• Customer-facing platforms and data
• AI / ML models, data pipelines, and analytics platforms

The role requires a leader who can lead during security crises, drive rapid response, and build long-term capability, while aligning security investments to business priorities.

This is a full-time US Remote role with a salary of $198,500 to $240,000 and is bonus eligible.

Responsibilities

• Strategy & Leadership
  • Define and execute the enterprise security vision, strategy, and multi-year roadmap aligned to business and technology priorities
  • Build and lead a comprehensive, risk-based information security program across infrastructure, applications, and data
  • Serve as the primary executive security advisor to the CIO and leadership team
  • Provide hands-on technical leadership in architecture decisions, risk tradeoffs, and incident response
  • Other duties as assigned
• Security Crisis Management & Incident Response
  • Act as the executive leader during security incidents and crisis events
  • Lead end-to-end incident response, including investigation, containment, recovery, and communication
  • Establish and continuously improve:
    • Incident response playbooks
    • Escalation and communication models
    • Tabletop exercises and readiness programs
  • Ensure rapid, coordinated response across engineering, infrastructure, legal, and business teams
• Enterprise Security Engineering & Operations
  • Oversee and contribute to the design and implementation of security controls, including:
    • Cloud security (AWS)
    • Identity and access management (RBAC)
    • Application security and DevSecOps
    • Data security (encryption, classification, protection)
  • Improve:
    • Vulnerability management and remediation velocity
    • Detection, monitoring, and response capabilities
    • Security tooling effectiveness and cost efficiency
  • Serve as technical escalation point for complex security issues
• AI Governance & Model Risk Management
  • Define and lead the AI security and governance framework, including:
    • Model risk management
    • Secure AI/ML development and deployment practices
    • Data security for AI pipelines
  • Partner with Enterprise Data & AI teams to ensure:
    • Governance, auditability, and risk controls for AI systems
    • Integrate AI-related risks into the enterprise risk management program
• Governance, Risk, & Compliance
  • Own and lead the GRC function, including direct management of 2 GRC team members
  • Define and maintain security policies, standards, and procedures
  • Lead all audit and compliance activities, including customer and regulatory requirements
  • Oversee:
    • Vendor risk management
    • Regulatory compliance (e.g., SOC2, GDPR, HIPAA)
    • Security reporting and risk metrics
• Business & Customer Engagement
  • Support customer and prospect security due diligence, audits, and questionnaires
  • Partner with product, engineering, and GTM teams to ensure security is a business enabler
  • Represent Eagleview externally on security posture and capabilities
• Organizational Leadership & Culture
  • Build and develop a high-performing cybersecurity organization
  • Address capability gaps through hands-on leadership, hiring, and coaching
  • Drive security awareness and training programs across the company
  • Establish a strong security-first culture across engineering and business teams

Qualifications

• Prior experience in a senior Information Security leadership role with responsibilities comparable to a CISO, Deputy CISO, or VP of Information Security
• 15+ years of experience in enterprise cybersecurity, including cloud-based environments
• Proven experience leading SOC 2 Type 2 (or equivalent) certification programs end-to-end
• Strong hands-on experience across:
  • Cloud security (AWS)
  • Application security / DevSecOps
  • Identity and access management
  • Security operations and incident response
• Demonstrated experience leading security incidents and crisis management
• Experience leading GRC, compliance, and risk programs
• Certifications preferred (CISSP, CISM, GIAC)
• Bachelor’s degree required

Preferred Experience

• Experience with AI/ML security, data governance, or model risk management
• Advanced degree preferred

Core Competencies

• Enterprise Perspective – Makes decisions with enterprise-wide impact in mind
• Talent Assessment & Insight – Accurately assesses performance and potential
• Leading Through Systems – Builds systems that drive scalable results
• Continuous Improvement – Drives continuous improvement and operational excellence
• Cross-Functional Dynamics – Influences diverse groups to achieve alignment
• Vision & Purpose Leadership – Inspires with a clear, compelling vision