$220,000 - $250,000 / year
The VP, Cybersecurity is responsible for developing and executing Vertafore's enterprise cybersecurity strategy and leading the organization's cybersecurity operations, architecture, engineering, and risk mitigation programs. This executive is accountable for protecting Vertafore's SaaS products, cloud infrastructure, corporate systems, and sensitive customer data through effective security controls, proactive threat detection, incident response, and continuous security improvement.
The VP provides strategic leadership across security operations, product and application security, cloud security, identity and access management, vulnerability management, and emerging technology security, including artificial intelligence. The role partners closely with Engineering, Product, Information Technology, Legal, and Compliance to integrate security into business operations and product development while supporting Vertafore's customer commitments and regulatory obligations.
As a senior leader, the VP establishes measurable cybersecurity objectives, develops high-performing global security teams, manages cybersecurity investments, and provides executive leadership with clear visibility into material security risks, operational performance, and security program maturity.
Core Duties and Responsibilities:Enterprise Cybersecurity Strategy and Leadership• Develop and execute a multi-year, risk-based cybersecurity strategy and roadmap aligned with Vertafore business priorities and evolving threats.
• Lead and develop high-performing cybersecurity teams, establish clear accountability, and support succession planning, professional development, and a strong security culture.
• Own cybersecurity budgets, resource planning, vendor investments, program priorities, and performance metrics; report material risks and progress to executive leadership.
• Advance zero-trust principles, including identity and access management, least privilege, network segmentation, and continuous verification.
• Partner with Roper Technologies corporate cybersecurity to align Vertafore's program with the Roper cyber controls framework, participate in portfolio-wide security initiatives, and provide timely reporting on control maturity, material risks, and incidents
Security Operations, Incident Response, and Resilience• Lead security monitoring, threat detection, investigation, containment, and remediation capabilities, including a coordinated 24/7 monitoring and response operating model.
• Oversee security operations tooling, detection engineering, endpoint protection, threat intelligence, threat hunting, and external attack surface management.
• Maintain and exercise cybersecurity incident response plans; coordinate response with IT, Engineering, Legal, Compliance, and external specialists, including post-incident reviews and corrective actions.
• Partner with IT and business continuity owners on cyber recovery readiness, ransomware resilience, disaster recovery exercises, and response to major technology disruptions.
• Define and monitor operational measures such as detection coverage, response effectiveness, remediation timeliness, and control performance.
Cloud, Product, Application and AI Security• Direct security architecture and engineering for cloud environments, SaaS platforms, corporate infrastructure, and data center systems where applicable.
• Partner with Product and Engineering to integrate security into the software development lifecycle, including secure design, code and dependency security, penetration testing, and remediation of application vulnerabilities.
• Establish security requirements and review processes for AI-enabled products, agents, models, and integrations, including access controls, prompt-injection defenses, sensitive-data protection, and monitoring of AI-specific threats.
• Assess material security risks arising from development environments, cloud configurations, privileged access, and third-party technology integrations.
Technical Risk and Third-party Security• Oversee technical risk assessments, threat modeling, vulnerability identification, prioritization, and remediation across the enterprise and product environments.
• Establish and validate security controls and technical standards consistent with applicable frameworks and business requirements
• Partner with Compliance on vendor security assessments by defining technical security requirements, evaluating material vendor risks, and tracking technical remediation.
• Partner with Legal and Compliance to support security governance, contractual commitments, audits, and regulatory obligations while retaining ownership of technical security controls and corrective actions.
Customer Security and Cross-Functional Partnership• Provide executive-level technical support for significant customer security inquiries, escalations, and security-related commitments.
• Partner with Compliance and Assurance on customer assessments and audit evidence, ensuring technical accuracy and timely resolution of security issues; support rather than duplicate operational questionnaire and audit coordination.
• Build productive relationships with business and technology leaders and communicate cybersecurity priorities, tradeoffs, and risk decisions clearly.
• Lead cybersecurity projects and transformation initiatives to deliver defined security outcomes within approved scope, timelines, and budgets.
Skills & Requirements
Knowledge, Skills and Abilities:• Expertise in enterprise cybersecurity strategy, security operations, incident response, zero-trust architecture, cloud security, and product/application security.
• Strong knowledge of SaaS environments, secure software development, IAM, vulnerability management, and security engineering.
• Understanding of AI security threats and controls, third-party security risk, NIST frameworks, ISO 27001, MITRE ATT&CK, and relevant security assurance requirements such as SOC 2..
• Demonstrated ability to lead globally distributed teams, influence senior stakeholders, manage budgets, and translate technical risk into business decisions.
• Excellent communication, executive reporting, prioritization, collaboration, and crisis leadership skills.
Qualifications: • Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience; advanced degree preferred.
• 15+ years of progressive cybersecurity experience.
• 10+ years of cybersecurity leadership experience.
• CISSP, GIAC, CISM, or equivalent cybersecurity certification preferred.
Additional Requirements and Details:• Travel required up to 10% of the time.
• Ability to work remotely with a stable internet connection as needed.
• Ability to work from an office location when required.
• Occasional lifting and/or moving up to 10 pounds.
• Frequent repetitive hand and arm movements required to operate a computer.
• Close vision required for computer work.
• Frequent sitting and/or standing.
Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions!
Why Vertafore is the place for you: *Canada Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- Medical, vision & dental plans
- Life, AD&D
- Short Term and Long Term Disability
- Pension Plan & Employer Match
- Maternity, Paternity and Parental Leave
- Employee and Family Assistance Program (EFAP)
- Education Assistance
- Additional programs - Employee Referral and Internal Recognition
Why Vertafore is the place for you: *US Only
- The opportunity to work in a space where modern technology meets a stable and vital industry
- We have a Flexible First work environment! Our North America team members use our offices for collaboration, community and team-building, with members asked to sometimes come into an office and/or travel depending on job responsibilities. Other times, our teams work from home or a similar environment.
- Medical, vision & dental plans
- PPO & high-deductible options
- Health Savings Account & Flexible Spending Accounts Options:
- Health Care FSA
- Dental & Vision FSA
- Dependent Care FSA
- Commuter FSA
- Life, AD&D (Basic & Supplemental), and Disability
- 401(k) Retirement Savings Plain & Employer Match
- Supplemental Plans - Pet insurance, Hospital Indemnity, and Accident Insurance
- Parental Leave & Adoption Assistance
- Employee Assistance Program (EAP)
- Education & Legal Assistance
- Additional programs - Tuition Reimbursement, Employee Referral, Internal Recognition, and Wellness
- Commuter Benefits (Denver)
