VP, Chief Information Security Officer (CISO)

FCCI•Sarasota, FL

23h•Onsite

About The Position

We are seeking a strategic and experienced Chief Information Security Officer (CISO) to lead our enterprise cybersecurity program. This executive role is responsible for protecting customer, employee, financial, and operational data while supporting business growth, regulatory compliance, and innovation within the insurance industry. This position will be based out of our Sarasota, FL corporate office.

Requirements

Experience leading an enterprise cybersecurity program.
Experience in the insurance industry.
Experience with AI governance, data classification, and machine learning security.
Experience with cloud security (AWS, Azure, GCP).
Experience with security operations, vulnerability management, penetration testing, and threat monitoring.
Experience with incident response and cyber crisis management.
Knowledge of insurance, privacy, and cybersecurity regulations.
Experience with third-party and vendor risk management.
Experience with identity and access management (IAM) and insider threat risk controls.
Experience managing cybersecurity budgets, investments, and resources.
Experience reporting cybersecurity risks to executive leadership and the Board.
Ability to partner with business and technology leaders.

Responsibilities

Develop and maintain the enterprise cybersecurity strategy, governance framework, policies, and standards.
Identify, assess, and manage cybersecurity risks, including emerging threats impacting the insurance industry.
Lead AI governance, data classification, and machine learning security initiatives.
Oversee cloud, infrastructure, and application security across AWS, Azure, and GCP environments.
Ensure the security of company data, analytics platforms, and data pipelines.
Direct security operations, vulnerability management, penetration testing, and threat monitoring.
Lead incident response and cyber crisis management activities.
Ensure compliance with applicable insurance, privacy, and cybersecurity regulations.
Manage third-party and vendor cybersecurity risk programs.
Oversee identity and access management (IAM) programs and insider threat risk controls.
Manage cybersecurity budgets, investments, and resources.
Provide regular cybersecurity updates and risk reporting to executive leadership and the Board.
Partner with business and technology leaders to strengthen security while enabling growth and innovation.