CISO Program Delivery Leader (Cybersecurity Services)

American IT Systems•Portland, ME

About The Position

We are looking for a dynamic and experienced CISO cum Overall Program Delivery Leader to lead customer end to end service delivery. This role will act as a trusted security advisor to the client and drive a robust governance, risk, and compliance framework, while managing global onsite offshore delivery teams. The individual will be accountable for strategy, governance, execution, and operational excellence across all cybersecurity layers including Risk & Compliance, SOC, Protection, Detection & Response, and Recovery.

Requirements

15+ years of experience in cybersecurity and IT delivery
Experience as CISO / Security Leader / Delivery Head
Familiarity with enterprise IT landscapes (Infrastructure, Applications, Cloud)
Frameworks & Compliance Expertise in: NIST, ISO 27001, CIS Controls
Audit, risk, and control frameworks
Leadership & Communication
Strong executive presence and stakeholder management skills
Ability to influence C level leadership and drive decisions
Excellent communication, governance, and reporting capabilities

Nice To Haves

CISSP, CISM, CISA
ISO 27001 Lead Implementer/Auditor
PMP / Program Management
HIPAA / healthcare compliance (preferred given context)

Responsibilities

Act as virtual CISO / security leader for the client, defining cybersecurity vision and roadmap
Establish and implement enterprise security frameworks (NIST, ISO 27001, CIS, HIPAA, etc.)
Define security policies, standards, and control structures aligned to business needs
Provide advisory on risk posture, threat landscape, and compliance mandates
Own overall program governance across all security workstreams
Establish PMO governance model aligned to CIO and GRC functions
Ensure end to end accountability, visibility, and performance tracking
Lead and operationalize the end to end security operating model, including: Risk & Compliance, Security Operations Center (SOC), Detection & Response (Threat monitoring, Incident response), Recovery & Resilience (DR, BCP testing)
Ensure segregation of duties, clear communication, and control adherence
Lead global delivery teams (onsite + offshore) across security domains
Drive high quality, SLA driven delivery with continuous improvement
Lead risk management, compliance monitoring, and control assurance programs
Ensure readiness for internal/external audits and regulatory assessments
Drive VAPT, audit remediation, and compliance reporting
Oversee 24x7 SOC operations and threat monitoring
Ensure effective incident detection, response, and escalation management
Govern security tools, SIEM, endpoint, and identity platforms
Drive maturity improvement for threat intelligence and response capabilities
Own program is financial, budgeting, and margin management
Manage delivery across T&M, Fixed Price, and Managed Services models
Drive cost optimization and value realization initiatives
Act as single point of accountability for client leadership (CISO/CIO/CXOs)
Build strong partnerships with IT, business, and compliance stakeholders
Present executive dashboards, risk posture, and transformation roadmap
Lead security transformation initiatives (IAM, SailPoint, Cloud Security, GRC)
Drive automation, process optimization, and innovation in security services