Vice President – Deputy CISO

Arctic Wolf

. Directly manage Security Engineering, Security Operations (SecOps), and Governance, Risk, and Compliance (GRC), including hiring, performance management, and leadership development .

Posted 10/2/2026full-timeUnited StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Security Engineering, Security Operations, and Governance, Risk, and Compliance (GRC), with a strong focus on risk management, compliance frameworks, and executive-level communication. Proven ability to lead teams, manage budgets, and establish strategic priorities in alignment with organizational goals.

Highest-signal resume keywords

Security Engineering LeadershipGovernance, Risk, And Compliance (GRC)Risk Management Program DevelopmentSOC 2 And ISO 27001 Certification ManagementExecutive Communication And Stakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentIncident ResponseSecurity MonitoringThreat DetectionSecurity Governance FrameworkData Privacy RegulationsSecure ArchitectureSecurity Automation PracticesThird-Party Risk ManagementAudit Oversight

Soft Skills

Leadership DevelopmentDecision-MakingPerformance ManagementExecutive-Level Relationship BuildingStakeholder Management

Tools & Technologies

GRC PlatformsArcherOneTrustVantaDrata

Certifications & Qualifications

CISSPCISMCRISCCISA

Industry Keywords

NISTISO 27001SOC 2GDPRCCPAFinancial ServicesHealthcareSaaSCybersecurityRegulated Industry

Tech Stack

Tools & technologies

Cyber SecuritySDLC

About the role

Key responsibilities & impact

Directly manage Security Engineering, Security Operations (SecOps), and Governance, Risk, and Compliance (GRC), including hiring, performance management, and leadership development
Set strategy and priorities across security engineering, security operations, and GRC as one coordinated program
Own the security governance framework and compliance posture against industry frameworks and regulations
Oversee third-party risk management and audit oversight
Oversee the security engineering roadmap and security monitoring, threat detection, and incident response
Lead post-incident governance and regulatory notification
Own the enterprise security risk management program, including risk assessment, treatment, reporting, and the risk register
Manage the combined budget for security engineering, SecOps, and GRC
Contribute to enterprise security budget planning alongside the CISO
Provide leadership continuity in the CISO’s absence, including strategy execution, decision-making, and executive and board representation
Deliver security metrics, KPIs, and risk reporting to executive leadership, the board, and audit or risk committees
Partner with Legal and Privacy on contractual, regulatory, and privacy obligations, customer due diligence, and RFP responses
Represent Arctic Wolf’s security and compliance posture with customers, auditors, regulators, and senior executives

Requirements

What you’ll need

8+ years of leadership experience directly managing security engineering, security operations, or GRC teams
10+ years of progressive information security experience spanning both technical security engineering functions and GRC
Demonstrated experience building and leading enterprise risk management programs, including risk assessment, risk registers, and reporting to executive leadership
Demonstrated experience managing SOC 2, ISO 27001, or similar certification and audit processes from initiation through completion
Experience with international industry security standards (NIST, ISO, SOC 2) and data privacy regulations (GDPR, CCPA, and other regional standards)
Experience managing third-party and vendor risk management programs
Ability to establish executive-level relationships across business and technology leadership and manage competing priorities under pressure
A Bachelor’s Degree in Computer Science, Information Systems, Engineering, or a related technical field
Deep knowledge of information security governance, risk management, and compliance (GRC) frameworks, including NIST CSF, NIST 800-53, ISO 27001/27701, SOC 2, and CIS Controls
Demonstrated ability to lead security engineering and security operations teams, including secure architecture, SOC operations, and incident response
Experience designing and operating enterprise risk assessment, risk register, and audit or certification processes (e.g., SOC 2 Type II, ISO 27001)
Strong understanding of data privacy regulations, including GDPR and CCPA/CPRA, and third-party risk management practices
Familiarity with Secure SDLC, DevSecOps, and security automation practices
Strong executive communication, board reporting, and stakeholder management skills
Ability to translate technical and regulatory risk into business risk language for non-technical audiences
Background checks are required for this position
If applicable, authorization to receive software or technology controlled under U.S. export control laws and regulations is required
Preferred: Experience serving as a CISO, Deputy CISO, or acting CISO
Preferred: Relevant industry certification(s) such as CISSP, CISM, CRISC, or CISA
Preferred: Master’s degree in a related field, or MBA
Preferred: Experience in a regulated industry, such as financial services, healthcare, or SaaS/cybersecurity
Preferred: Familiarity with GRC platforms, tools, and automation (e.g., Archer, OneTrust, Vanta, or Drata)

Benefits

Comp & perks

Equity for all employees
Flexible time off and paid volunteer days
RRSP and 401k match
Training and career development programs
Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
Robust Employee Assistance Program (EAP) with mental health services
Fertility support and paid parental leave
Accessibility accommodations as required for candidates and employees with disabilities and/or other specific needs