VP, Cybersecurity

Vertafore•Denver, CO

18d•$220,000 - $250,000

About The Position

The VP, Cybersecurity develops and executes Vertafore’s enterprise cybersecurity strategy and leads cybersecurity operations, architecture, engineering, and risk mitigation. The role is accountable for protecting the company’s SaaS products, cloud infrastructure, corporate systems, and sensitive customer data through security controls, threat detection, incident response, and ongoing improvement. The VP provides strategic leadership across security operations, product and application security, cloud security, identity and access management, vulnerability management, and emerging technology security, including artificial intelligence. The role partners with Engineering, Product, Information Technology, Legal, and Compliance to integrate security into business operations and product development and to support customer commitments and regulatory obligations. As a senior leader, the VP establishes measurable cybersecurity objectives, develops global security teams, manages cybersecurity investments, and gives executive leadership visibility into material risks, operational performance, and program maturity.

Responsibilities

Develop and execute a multi-year, risk-based cybersecurity strategy and roadmap aligned with business priorities and evolving threats.
Lead and develop cybersecurity teams, establish accountability, support succession planning and professional development, and foster a strong security culture.
Own cybersecurity budgets, resource planning, vendor investments, program priorities, and performance metrics; report material risks and progress to executive leadership.
Advance zero-trust principles, including identity and access management, least privilege, network segmentation, and continuous verification.
Partner with Roper Technologies corporate cybersecurity to align Vertafore’s program with the Roper cyber controls framework, participate in portfolio-wide initiatives, and report on control maturity, material risks, and incidents.
Lead security monitoring, threat detection, investigation, containment, and remediation capabilities, including a coordinated 24/7 monitoring and response operating model.
Oversee security operations tooling, detection engineering, endpoint protection, threat intelligence, threat hunting, and external attack surface management.
Maintain and exercise cybersecurity incident response plans; coordinate responses with IT, Engineering, Legal, Compliance, and external specialists, and oversee post-incident reviews and corrective actions.
Partner with IT and business continuity owners on cyber recovery readiness, ransomware resilience, disaster recovery exercises, and responses to major technology disruptions.
Define and monitor operational measures, including detection coverage, response effectiveness, remediation timeliness, and control performance.
Direct security architecture and engineering for cloud environments, SaaS platforms, corporate infrastructure, and applicable data center systems.
Partner with Product and Engineering to integrate security into the software development lifecycle, including secure design, code and dependency security, penetration testing, and application vulnerability remediation.
Establish security requirements and review processes for AI-enabled products, agents, models, and integrations, including access controls, prompt-injection defenses, sensitive-data protection, and monitoring of AI-specific threats.
Assess material security risks involving development environments, cloud configurations, privileged access, and third-party technology integrations.
Oversee technical risk assessments, threat modeling, vulnerability identification, prioritization, and remediation across enterprise and product environments.
Establish and validate security controls and technical standards consistent with applicable frameworks and business requirements.
Partner with Compliance on vendor security assessments by defining technical security requirements, evaluating material vendor risks, and tracking technical remediation.
Partner with Legal and Compliance on security governance, contractual commitments, audits, and regulatory obligations while retaining ownership of technical security controls and corrective actions.
Provide executive-level technical support for significant customer security inquiries, escalations, and security-related commitments.
Partner with Compliance and Assurance on customer assessments and audit evidence, ensuring technical accuracy and timely resolution of security issues; support rather than duplicate operational questionnaire and audit coordination.
Build productive relationships with business and technology leaders and clearly communicate cybersecurity priorities, tradeoffs, and risk decisions.
Lead cybersecurity projects and transformation initiatives to deliver defined security outcomes within approved scope, timelines, and budgets.