Overview

The VP, Information Security will build a modern, scalable, and resilient security program, ensuring strong protection of:

• Enterprise systems and cloud infrastructure
• Customer-facing platforms and data
• AI / ML models, data pipelines, and analytics platforms
• The role requires a leader who can lead during security crises, drive rapid response, and build long-term capability, while aligning security investments to business priorities.

This is a full-time US Remote role with salary of $198,500 to $240,000 and bonus eligible.

Responsibilities

Strategy & Leadership

• Define and execute the enterprise security vision, strategy, and multi-year roadmap aligned to business and technology priorities
• Build and lead a comprehensive, risk-based information security program across infrastructure, applications, and data.
• Serve as the primary executive security advisor to the CIO and leadership team.
• Provide hands-on technical leadership in architecture decisions, risk tradeoffs, and incident response.
• Other duties as assigned.

Security Crisis Management & Incident Response

• Act as the executive leader during security incidents and crisis events.
• Lead end-to-end incident response, including investigation, containment, recovery, and communication.
• Establish and continuously improve:
  • Incident response playbooks.
  • Escalation and communication models.
  • Tabletop exercises and readiness programs.
• Ensure rapid, coordinated response across engineering, infrastructure, legal, and business teams.

Enterprise Security Engineering & Operations

• Oversee and contribute to the design and implementation of security controls, including:
  • Cloud security (AWS).
  • Identity and access management (RBAC).
  • Application security and DevSecOps.
  • Data security (encryption, classification, protection).
• Improve:
  • Vulnerability management and remediation velocity.
  • Detection, monitoring, and response capabilities.
  • Security tooling effectiveness and cost efficiency.
• Serve as technical escalation point for complex security issues.

AI Governance & Model Risk Management

• Define and lead the AI security and governance framework, including:
  • Model risk management.
  • Secure AI/ML development and deployment practices.
  • Data security for AI pipelines.
• Partner with Enterprise Data & AI teams to ensure:
  • Governance, auditability, and risk controls for AI systems.
• Integrate AI-related risks into the enterprise risk management program.

Governance, Risk, & Compliance

• Own and lead the GRC function, including direct management of 2 GRC team members.
• Define and maintain security policies, standards, and procedures.
• Lead all audit and compliance activities, including customer and regulatory requirements.
• Oversee:
  • Vendor risk management.
  • Regulatory compliance (e.g., SOC2, GDPR, HIPAA).
  • Security reporting and risk metrics.

Business & Customer Engagement

• Support customer and prospect security due diligence, audits, and questionnaires.
• Partner with product, engineering, and GTM teams to ensure security is a business enabler.
• Represent Eagleview externally on security posture and capabilities.

Organizational Leadership & Culture

• Build and develop a high-performing cybersecurity organization.
• Address capability gaps through hands-on leadership, hiring, and coaching.
• Drive security awareness and training programs across the company.
• Establish a strong security-first culture across engineering and business teams.

Qualifications

Required Experience:

• Prior experience in a senior Information Security leadership role with responsibilities comparable to a CISO, Deputy CISO, or VP of Information Security.
• 15+ years of experience in enterprise cybersecurity, including cloud-based environments.
• Proven experience leading SOC 2 Type 2 (or equivalent) certification programs end-to-end.
• Strong hands-on experience across:
  • Cloud security (AWS).
  • Application security / DevSecOps.
  • Identity and access management.
  • Security operations and incident response.
• Demonstrated experience leading security incidents and crisis management.
• Experience leading GRC, compliance, and risk programs.
• Certifications preferred (CISSP, CISM, GIAC).
• Bachelor's degree required.

Preferred Experience:

• Experience with AI/ML security, data governance, or model risk management.
• Advanced degree preferred.

Core Competencies:
The successful candidate will demonstrate strength in the following competencies as well as foundational competencies which can be found here:

• Enterprise Perspective - Makes decisions with enterprise-wide impact in mind.
• Talent Assessment & Insight - Accurately assesses performance and potential.
• Leading Through Systems - Builds systems that drive scalable results.
• Continuous Improvement - Drives continuous improvement and operational excellence.
• Cross-Functional Dynamics - Influences diverse groups to achieve alignment.
• Vision & Purpose Leadership - Inspires with a clear, compelling vision.

This job description is not an exclusive or exhaustive list of all job functions that a workforce member in this position may be asked to perform. Duties and responsibilities can be changed, expanded, reduced, or delegated by management to meet the business needs of the company.

The compensation offered to the successful candidate will be based on a variety of factors, including but not limited to, the candidate's work experience, education and licenses, work-related training, key skills, the core duties of the role and its associated responsibilities, additional benefits offered, and the location where the work will be performed. All Fulltime (30+ hours) employees are eligible for PTO, Sick, and Parental Leave; Medical, Dental, and Vision Insurance; 401(k) Plan; Health Savings Account; Life Insurance; Employee Assistance Program; Pet Insurance. This is a full-time US Remote role with salary of $198,500 to $240,000 with a potential bonus of 30%.