Vice President, Deputy CISO

Arctic Wolf

. Directly manage the Security Engineering, Security Operations (SecOps), and GRC functions, including hiring, performance management, and development of each team’s leadership .

Posted 9/23/2026full-timeUnited StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive leadership in Security Engineering, Security Operations, and Governance, Risk, and Compliance (GRC) functions, with a strong focus on risk management, compliance frameworks, and executive-level communication. Proven ability to manage security governance frameworks and deliver metrics and reporting to senior leadership.

Highest-signal resume keywords

Security Engineering LeadershipGovernance, Risk, And Compliance (GRC)Risk Management Program DevelopmentSOC 2 And ISO 27001 Certification ManagementExecutive Communication And Stakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security GovernanceRisk AssessmentIncident ResponseThreat DetectionSecurity MonitoringSecure ArchitectureRisk Register ManagementData Privacy RegulationsSecurity AutomationSecure SDLC

Soft Skills

Executive CommunicationStakeholder ManagementDecision-MakingLeadershipPerformance Management

Certifications & Qualifications

SOC 2ISO 27001NIST CSFNIST 800-53

Industry Keywords

Information SecurityCompliance PostureThird-Party Risk ManagementData Privacy RegulationsAudit Processes

Tech Stack

Tools & technologies

SDLC

About the role

Key responsibilities & impact

Directly manage the Security Engineering, Security Operations (SecOps), and GRC functions, including hiring, performance management, and development of each team’s leadership
Set strategy and priorities across security engineering, security operations, and GRC
Own the organization’s security governance framework and compliance posture against industry frameworks and regulations
Oversee the security engineering roadmap and the operation of security monitoring, threat detection, and incident response
Own the enterprise security risk management program, including risk assessment, treatment, reporting, and the organization’s risk register
Manage the combined budget for security engineering, SecOps, and GRC
Provide leadership continuity in the CISO’s absence, including strategy execution, decision-making, and representation at executive and board levels
Deliver security metrics, KPIs, and risk reporting to executive leadership, the board, and audit or risk committees
Partner with Legal and Privacy on contractual, regulatory, and privacy obligations, including customer due diligence and RFP responses
Represent Arctic Wolf’s security and compliance posture with customers, auditors, regulators, and senior executives

Requirements

What you’ll need

8+ years of leadership experience directly managing security engineering, security operations, or GRC teams
10+ years of progressive information security experience spanning both technical security engineering functions and GRC
Demonstrated experience building and leading enterprise risk management programs, including risk assessment, risk registers, and reporting to executive leadership
Demonstrated experience managing SOC 2, ISO 27001, or similar certification and audit processes from initiation through completion
Experience with international industry security standards (NIST, ISO, SOC 2) and data privacy regulations (GDPR, CCPA, and other regional standards)
Experience managing third-party and vendor risk management programs
Ability to establish executive-level relationships across business and technology leadership and manage competing priorities under pressure
A Bachelor’s Degree in Computer Science, Information Systems, Engineering, or a related technical field
Deep knowledge of information security governance, risk management, and compliance (GRC) frameworks, including NIST CSF, NIST 800-53, ISO 27001/27701, SOC 2, and CIS Controls
Demonstrated ability to lead security engineering and security operations teams, including secure architecture, SOC operations, and incident response
Experience designing and operating enterprise risk assessment, risk register, and audit or certification processes (e.g., SOC 2 Type II, ISO 27001)
Strong understanding of data privacy regulations, including GDPR and CCPA/CPRA, and third-party risk management practices
Familiarity with Secure SDLC, DevSecOps, and security automation practices
Strong executive communication, board reporting, and stakeholder management skills
Ability to translate technical and regulatory risk into business risk language for non-technical audiences
Background checks are required for this position
If applicable, authorization to receive software or technology controlled under U.S. export control laws and regulations

Benefits

Comp & perks

Equity for all employees
Flexible time off and paid volunteer days
RRSP and 401k match
Training and career development programs
Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
Robust Employee Assistance Program (EAP) with mental health services
Fertility support and paid parental leave
Accommodations for candidates and employees with disabilities and/or other specific needs where possible