CISO Program Delivery Leader (Cybersecurity Services)

Job Description

Company: American IT Systems

Location: Portland, US

Description

15+ years of experience in cybersecurity and IT delivery
Experience as CISO / Security Leader / Delivery Head
Certifications preferred:
CISSP, CISM, CISA
ISO 27001 Lead Implementer/Auditor
PMP / Program Management
Job Description: CISO & Overall Program Delivery Leader (Cybersecurity Services)
Role Overview
We are looking for a dynamic and experienced CISO cum Overall Program Delivery Leader to lead customer end to end service delivery. This role will act as a trusted security advisor to the client and drive a robust governance, risk, and compliance framework, while managing global onsite offshore delivery teams.
The individual will be accountable for strategy, governance, execution, and operational excellence across all cybersecurity layers including Risk & Compliance, SOC, Protection, Detection & Response, and Recovery.
Key Responsibilities
1. CISO Leadership & Security Strategy
Act as virtual CISO / security leader for the client, defining cybersecurity vision and roadmap
Establish and implement enterprise security frameworks (NIST, ISO 27001, CIS, HIPAA, etc.)
Define security policies, standards, and control structures aligned to business needs
Provide advisory on risk posture, threat landscape, and compliance mandates
2. End to End Program Governance
Own overall program governance across all security workstreams
Establish PMO governance model aligned to CIO and GRC functions
Ensure end to end accountability, visibility, and performance tracking
3. Security Operating Model Ownership
Lead and operationalize the end to end security operating model, including:
Risk & Compliance
Security Operations Center (SOC)
Detection & Response (Threat monitoring, Incident response)
Recovery & Resilience (DR, BCP testing)
Ensure segregation of duties, clear communication, and control adherence
4. Delivery Leadership (Onsite + Offshore Model)
Lead global delivery teams (onsite + offshore) across security domains
Drive high quality, SLA driven delivery with continuous improvement
5. Risk, Compliance & Audit Management
Lead risk management, compliance monitoring, and control assurance programs
Ensure readiness for internal/external audits and regulatory assessments
Drive VAPT, audit remediation, and compliance reporting
6. Security Operations & SOC Governance
Oversee 24×7 SOC operations and threat monitoring
Ensure effective incident detection, response, and escalation management
Govern security tools, SIEM, endpoint, and identity platforms
Drive maturity improvement for threat intelligence and response capabilities
7. Financial & Commercial Management
Own program is financial, budgeting, and margin management
Manage delivery across T&M, Fixed Price, and Managed Services models
Drive cost optimization and value realization initiatives
8. Stakeholder & Executive Management
Act as single point of accountability for client leadership (CISO/CIO/CXOs)
Build strong partnerships with IT, business, and compliance stakeholders
Present executive dashboards, risk posture, and transformation roadmap
9. Transformation & Continuous Improvement
Lead security transformation initiatives (IAM, SailPoint, Cloud Security, GRC)
Drive automation, process optimization, and innovation in security services
Key Skills & Experience
Familiarity with enterprise IT landscapes (Infrastructure, Applications, Cloud)
Frameworks & Compliance
Expertise in:
NIST, ISO 27001, CIS Controls
HIPAA / healthcare compliance (preferred given context)
Audit, risk, and control frameworks
Leadership & Communication
Strong executive presence and stakeholder management skills
Ability to influence C level leadership and drive decisions
Excellent communication, governance, and reporting capabilities

Source: Adzuna