- 10+ years of experience in information security, with at least 5-10 years in a leadership role focused on technical security across cloud, infrastructure, applications, and third-party integrations.
- Deep understanding of security principles across all tech layers, including cloud platforms (AWS, Azure, GCP), infrastructure security (network, endpoint, IAM), application security (SAST, DAST, secure coding), and third-party risk management frameworks
- Familiarity with security tools such as SIEM: Splunk specifically, vulnerability scanners (e.g., Qualys, Nessus), or IAM solutions (e.g., Okta, SailPoint).
- Demonstrated ability to work independently, take ownership of security initiatives, and drive results with minimal supervision.
- Strong executive presence and immaculate ability to articulate technical security concepts in a business/risk context
- Customer-focused: You know how to balance your "get it done" attitude with diplomacy to be able to work effectively across different teams and at all levels
- Proven ability to prioritize initiatives utilizing risk data from multiple input sources, while staying aligned with the bigger picture
- Strong understanding of security and compliance frameworks (e.g., SOX, NIST CSF, ISO 27001/2, CIS Controls).
- Ability to thrive in a dynamic, fast-paced environment, staying ahead of emerging threats and adapting strategies to evolving business needs.
- Excellent communication skills to translate complex security concepts into business-friendly language.
- Strong stakeholder management and collaboration skills to work with cross-functional teams and ability to influence decision-making without direct authority.
- A related technical degree required
