SVP, Chief Information Security Officer

Optimize the enterprise-wide information security strategy and roadmap aligned with business objectives and risk appetite. Partner with the CTO to integrate security into technology architecture, infrastructure decisions, software development practices, and vendor selection. Lead and develop a high-performing security team spanning security operations, vulnerability management, identity and access management, and data protection. Own the security risk management program, including assessments, gap analysis, and remediation planning across all business lines. Improve incident response capability and ensure compliance with regulatory requirements such as the FTC Safeguards Rule. Serve as the security liaison to the Board, executive leadership, investors, and external auditors. Manage third-party and vendor risk, embed security requirements in procurement and contracting, and champion a firm-wide security awareness program. Establish an internal offensive security function including ethical hacking and adversary emulation to proactively probe systems. Report to the Chief Legal and Administrative Officer while partnering closely with the CTO.