Chief Information Security Officer – CISO

Insurity

. Lead Insurity’s enterprise security, cybersecurity risk, and privacy programs .

Posted 10/22/2026full-timeRemote • United StatesLead💰 $216,000 - $325,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading enterprise security programs, including cybersecurity risk management, compliance with HIPAA and ePHI regulations, and AI governance. Proven ability to translate complex security and technology risks into strategic business decisions while managing cross-functional teams and budgets.

Highest-signal resume keywords

Enterprise Security LeadershipCybersecurity Risk ManagementHIPAA ComplianceAI GovernanceIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security StrategyRisk AssessmentVulnerability ManagementCloud SecurityApplication SecurityData ProtectionSecurity ArchitectureRegulatory ComplianceCrisis ManagementSecurity Metrics Reporting

Soft Skills

Exceptional CommunicationStakeholder InfluenceNegotiation SkillsTeam LeadershipCross-Functional Collaboration

Tools & Technologies

SaaS Operating ModelsIdentity ManagementEncryption TechnologiesIncident Response ToolsSecurity Awareness Training

Certifications & Qualifications

CISSPCISMCISACRISCCCSP

Industry Keywords

Cyber InsuranceHealthcare TechnologyInsurance TechnologyData GovernanceRegulated Environments

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead Insurity’s enterprise security, cybersecurity risk, and privacy programs
Protect information assets, products, customer environments, and the technology ecosystem while enabling growth, cloud adoption, international expansion, and responsible AI use
Translate cybersecurity, privacy, compliance, and technology risk into business decisions for executive leadership and the Board
Develop and improve enterprise information security strategy, policies, standards, and control frameworks
Establish security priorities aligned with business strategy, product roadmaps, customer commitments, and risk appetite
Maintain security governance, executive steering forums, and reporting to executive leadership and the Board
Direct HIPAA compliance and ePHI protection programs, including risk analyses, safeguards, audits, breach assessment, and workforce training
Establish and lead AI security and governance, including AI inventories, risk classification, approval gates, secure-use standards, and controls for AI-specific risks
Lead risk management, compliance, assurance, audits, remediation, cyber-insurance support, and regulatory requirements
Lead security operations, threat intelligence, vulnerability management, detection and response, penetration testing, investigations, and incident response
Coordinate cyber, privacy, PHI, ransomware, cloud compromise, insider threat, supply-chain, and AI-related incident response
Lead crisis tabletop exercises, simulations, communications, breach-disclosure playbooks, and post-incident improvements
Embed security-by-design across product development, architecture, engineering, DevOps, and change management
Oversee application, software supply-chain, cloud, infrastructure, identity, encryption, secrets, network, logging, monitoring, data-loss prevention, and secure configuration practices
Review and approve security architecture for products, platforms, infrastructure changes, AI systems, and customer-facing capabilities
Establish third-party security and privacy risk management for vendors, cloud providers, subprocessors, partners, and supply-chain participants
Maintain data classification, inventory, data-flow, retention, deletion, residency, and access-governance practices
Build and lead a high-performing security organization; hire, coach, and retain security talent
Manage security awareness and role-based training
Manage the security budget, partner strategy, managed service providers, and external security resources
Define and report security metrics, risk indicators, maturity measures, control health, remediation progress, incident trends, audit results, customer commitments, and AI-governance metrics

Requirements

What you’ll need

Bachelor’s degree in information security, computer science, information technology, business, or a related field; equivalent experience may be considered
8–10 years of progressive experience in information security, cybersecurity, technology risk, or related disciplines within a SaaS, cloud, technology, insurance, healthcare, or other regulated environment
At least 5 years of executive or senior leadership experience in a CISO, Deputy CISO, Head of Security, or comparable role
Demonstrated experience building and operating an enterprise security program across a distributed or remote organization
Experience with HIPAA, ePHI, Business Associate requirements, healthcare data protection, or comparable regulated-data obligations
Demonstrated experience leading security risk assessments, audits, remediation programs, and regulatory or customer assurance activities
Experience leading material incidents, crisis response, business continuity, disaster recovery, and executive communications
Experience establishing or operating an AI security, AI governance, responsible AI, model-risk, or secure-generative-AI program
Strong understanding of cloud, SaaS operating models, identity, encryption, application security, vulnerability management, incident response, and third-party risk
Exceptional written, verbal, presentation, negotiation, and stakeholder-influencing skills
Demonstrated ability to manage budgets, partners, vendors, priorities, and complex cross-functional programs
English language required for this position
Preferred: CISSP, CISM, CISA, CRISC, CCSP, or equivalent certification
Preferred: Experience with SOC 2 Type II, ISO/IEC 27001, NIST CSF, NIST AI RMF, or comparable frameworks
Preferred: Experience with AI/ML security, LLM security, agent security, model risk management, AI impact assessments, or AI red teaming
Preferred: Experience supporting customer security reviews, RFPs, renewals, and executive-level trust discussions
Preferred: Experience in insurance technology, property and casualty insurance, healthcare technology, or another data-intensive regulated industry
Preferred: Experience with cyber-risk quantification, cyber insurance, secure software supply chains, DevSecOps, and cloud-native security

Benefits

Comp & perks

Flexible work arrangements through the Flex First Workforce approach, including fully remote opportunities
Open PTO Policy
Comprehensive health coverage
Employer-matched retirement savings
Award-winning onboarding program
Mentorship program
Access to LinkedIn Learning and Kaplan
Discounted tuition for employees and family through the University of Arizona Global Campus partnership
Employee Referral Bonus program
Medical insurance
Dental insurance
Vision insurance
401(K) match
Paid maternity leave
Paid paternity leave
Disability insurance