Chief Information Security Officer (CISO)

Role summary

[Company] is hiring a Chief Information Security Officer to lead enterprise security, including the security of AI and machine learning systems. Reporting to the [CEO / CTO], you will set security strategy, lead the security organization, and ensure AI systems are protected across their lifecycle.

Key responsibilities

• Security strategy. Define and lead the enterprise information security strategy and roadmap.
• AI and model security. Extend security to AI systems, covering model, data, pipeline, and supply-chain risk.
• Governance and compliance. Maintain security controls aligned to [SOC 2 / ISO 27001 / NIST CSF] and support audits.
• Threat and vulnerability. Own threat detection, vulnerability management, and incident response.
• Risk management. Assess and communicate security risk, including AI-specific threats such as prompt injection, data poisoning, and model exfiltration.
• Team leadership. Build and lead the security organization and the security-awareness program.
• Assurance. Support customer, partner, and regulator assurance on security posture.

Required qualifications

• [10 to 15] years in information security, with [5 or more] years in security leadership.
• Deep knowledge of security frameworks such as ISO 27001, NIST CSF, and SOC 2, and of modern cloud security.
• Experience leading incident response and building security programs at scale.
• Executive communication and board reporting experience.

Preferred qualifications

• CISSP, CISM, or equivalent.
• Familiarity with AI and machine learning security risks and emerging standards.
• Experience in a regulated industry such as [financial services / healthcare / insurance / public sector].

About the team

[Describe the security organization, its size and maturity, and how AI security fits the current roadmap.]

[Salary range. Postings with salary ranges perform significantly better on GRC Careers, and several states require them.]