Information Security Officer

Endurance

. Manage and continuously modernize Sompo’s Information Security program for global operations .

Posted 10/21/2026full-timeUnited StatesSeniorLead💰 $180,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing and modernizing information security programs, with a focus on aligning security strategies with corporate policies and regulatory requirements. Capable of leading hybrid teams and translating operational metrics into meaningful KPIs while maintaining effective security controls across diverse environments.

Highest-signal resume keywords

Information Security ManagementRisk ManagementSecurity Strategy DevelopmentIncident Response ManagementTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security PatternsTechnical Security ControlsVulnerability ManagementData Loss PreventionEncryption ManagementAdversarial SimulationSecurity Audit LoggingThreat IntelligenceKPI DevelopmentRegulatory Compliance

Soft Skills

Excellent CommunicationInterpersonal SkillsSystematic ThinkingProject Structuring

Tools & Technologies

DevSecOps ProcessesCloud SecuritySaaS SecurityISO 270xxSOC 2

Certifications & Qualifications

CISSPCISM

Industry Keywords

Information SecurityRisk ManagementData Privacy RegulationsSecurity ArchitectureSecurity Program Management

Tech Stack

Tools & technologies

CloudSDLC

About the role

Key responsibilities & impact

Manage and continuously modernize Sompo’s Information Security program for global operations
Maintain alignment with external and corporate requirements
Manage security for more than 7,000 users, hundreds of developers and IT staff, more than 10,000 network devices, and 75+ physical and cloud locations
Maintain effective technical security controls across all systems and processes
Document security-control designs and provide real-time instrumentation
Prevent and detect malicious activity
Manage encryption and data loss prevention and detection
Maintain activity and audit logging, especially for privileged identities and access
Conduct adversarial simulation
Detect, report, and escalate vulnerabilities to operational teams
Maintain organization-wide vulnerability data for periodic and threat-driven real-time reporting
Operate and continuously evolve an efficient, instrumented security alerting function
Maintain an efficient and tested incident response procedure capable of handling events of any scale
Participate in the systems development lifecycle to ensure alignment with the information security program
Establish a communications program covering emerging threats, policy changes, achievements, and security recommendations
Manage and develop a hybrid security team including direct reports, matrix reports, managed services, and specialist contractors

Requirements

What you’ll need

Minimum of 15 years of experience in a combination of technical, security, and risk management roles
Minimum of 7 years in a senior management role within an information security function
Technical familiarity with security patterns, operations and controls for traditional Windows, cloud, and SaaS environments
Systematic thinking and ability to understand security controls within the larger operating environment
Ability to structure projects and programs in a risk-prioritized manner
Experience integrating regulatory requirements, corporate policies, and industry standards into operating procedures and designs
Experience maintaining and communicating security strategy and technical architecture
Ability to translate operational metrics into meaningful KPIs and risk quantifiers
Excellent written, verbal and interpersonal communications with non-technical leaders, customers, regulators, and technical colleagues
Experience maintaining a fast-changing security program with continuous improvement driven by threat intelligence, adversary tactics, operational metrics, and company priorities
Leadership experience managing a hybrid team of direct reports, matrix reports, managed services, and specialist contractors
Bachelor’s degree in computer science, information security, or a related field
Recognized information security certification such as CISSP or CISM
Prior experience with adoption of FAIR Threat modeling within the SDLC preferred
Familiarity with DevSecOps processes, tooling, and controls preferred
Experience gaining and maintaining certifications such as ISO 270xx and SOC 2 preferred
Knowledge of regional security data privacy regulations related to minimization, encryption, and cross-border data access preferred

Benefits

Comp & perks

Two medical plans to choose from, including a Traditional PPO & a Consumer Driven Health Plan with a Health Savings account providing a competitive employer contribution
Pharmacy benefits with mail order options
Dental benefits including orthodontia benefits for adults and children
Vision benefits
Health Care & Dependent Care Flexible Spending Accounts
Company-paid Life & AD&D benefits, including the option to purchase Supplemental life coverage for employee, spouse & children
Company-paid Disability benefits with very competitive salary continuation payments
401(k) Retirement Savings Plan with competitive employer contributions
Competitive paid-time-off programs, including company-paid holidays
Competitive Parental Leave Benefits & Adoption Assistance program
Employee Assistance Program
Tax-Free Commuter Benefit
Tuition Reimbursement & Professional Qualification benefits
Incentive awards based on company and individual performance
Hybrid work environment