Vice President, Deputy CISO

At Arctic Wolf you wont just watch the cybersecurity industry evolve youll help lead the change. Our global Pack is made up of people who thrive on solving hard problems moving fast and building technology that protects organizations around the world. Were proud to be recognized by Forbes CNBC Fortune CRN Gartner Peer Insights and IDC MarketScape but what matters most is the work behind it: delivering real outcomes for customers through award winning innovation like our Aurora Platform.

If youre looking for meaningful work smart teammates and the chance to make a real impact in a high-growth company thats redefining security operations Arctic Wolf is the right place for you!

Our mission is simple: End Cyber Risk. Were looking for a Vice President Deputy CISO to be a part of making that happen.

Position Overview:

You are an information security leader with deep experience across all domains of information security with particular strength in governance risk management and compliance (GRC) and a proven record of directly managing technical security teams. You know how to build trust and influence outcomes across the organization using your domain knowledge prior experience and executive presence to engage both technical and business leaders.

Reporting to the Chief Information Security Officer (CISO) the Vice President Deputy Chief Information Security Officer (Deputy CISO) is the direct people manager for Security Engineering Security Operations (SecOps) and Governance Risk and Compliance (GRC) with full accountability for the strategy staffing performance and budget of each function. The Deputy CISO ensures the enterprises personnel data and assets are protected against current and emerging threats and provides leadership continuity for the security program in the CISOs absence.

Location: must work in the Pleasant Grove Utah office not taking remote applicants at this time

Responsibilities:

• Directly manages the Security Engineering Security Operations (SecOps) and GRC functions including hiring performance management and development of each teams leadership.
• Sets strategy and priorities across security engineering security operations and GRC ensuring the three functions operate as one coordinated program.
• Owns the organizations security governance framework and compliance posture against industry frameworks and regulations (e.g. SOC 2 ISO 27001/27701 NIST CSF/800-53 PCI DSS GDPR CCPA) including third-party risk management and audit oversight.
• Oversees the security engineering roadmap and the operation of security monitoring threat detection and incident response including post-incident governance and regulatory notification.
• Owns the enterprise security risk management program including risk assessment treatment reporting and the organizations risk register.
• Manages the combined budget for security engineering SecOps and GRC and contributes to enterprise security budget planning alongside the CISO.
• Provides leadership continuity in the CISOs absence including strategy execution decision-making and representation at the executive and board levels.
• Delivers security metrics KPIs and risk reporting to executive leadership the board and audit or risk committees.
• Partners with Legal and Privacy to align security requirements with contractual regulatory and privacy obligations including customer due diligence and RFP responses.
• Acts as a representative for Arctic Wolfs security and compliance posture with customers auditors regulators and senior executives.

Skills and Requirements:

• 8 years of leadership experience directly managing security engineering security operations or GRC teams.
• 10 years of progressive information security experience spanning both technical security engineering functions and GRC.
• Demonstrated experience building and leading enterprise risk management programs including risk assessment risk registers and reporting to executive leadership.
• Demonstrated experience managing SOC 2 ISO 27001 or similar certification and audit processes from initiation through completion.
• Experience with international industry security standards (NIST ISO SOC 2) and data privacy regulations (GDPR CCPA and other regional standards).
• Experience managing third-party and vendor risk management programs.
• Ability to establish executive-level relationships across business and technology leadership and manage competing priorities under pressure.
• A Bachelors Degree in Computer Science Information Systems Engineering or a related technical field.
• Deep knowledge of information security governance risk management and compliance (GRC) frameworks including NIST CSF NIST 800-53 ISO 27001/27701 SOC 2 and CIS Controls.
• Demonstrated ability to lead security engineering and security operations teams including secure architecture SOC operations and incident response.
• Experience designing and operating enterprise risk assessment risk register and audit or certification processes (e.g. SOC 2 Type II ISO 27001).
• Strong understanding of data privacy regulations including GDPR and CCPA/CPRA and third-party risk management practices.
• Familiarity with Secure SDLC DevSecOps and security automation practices.
• Strong executive communication board reporting and stakeholder management skills.
• Ability to translate technical and regulatory risk into business risk language for non-technical audiences.

Preferred Skills and Requirements:

• Experience serving as a CISO Deputy CISO or acting CISO.
• Relevant industry certification(s) such as CISSP CISM CRISC or CISA.
• Masters degree in a related field or MBA.
• Experience in a regulated industry such as financial services healthcare or SaaS/cybersecurity.
• Familiarity with GRC platforms tools and automation (e.g. Archer OneTrust Vanta or Drata).

On-Camera Policy:

To support a fair transparent and engaging interview experience candidates interviewing remotely are expected to be on camera during all video interviews. Being on camera fosters authentic connection improves communication and allows for full engagement from both candidates and interviewers. We understand that technical bandwidth or location-related challenges may occasionally prevent video use. If this applies candidates are required to notify us in advance so we can explore appropriate accommodations.

About Arctic Wolf:

At Arctic Wolf we foster a collaborative and inclusive work environment that thrives on diversity of thought background and culture. This is reflected in our multiple awards including Top Workplace USA (2021-2025) Best Places to Work USA (2021-2025) Great Place to Work Canada (2021-2024) Great Place to Work UK (2024-2026) and Kununu Top Company Germany (2024-2026). Our commitment to bold growth and shaping the future of security operations is matched by our dedication to customer satisfaction with over 10000 customers worldwide and more than 2000 channel partners globally. As we continue to expand globally and enhance our technology Arctic Wolf remains the most trusted name in the industry.

Our Values:

Arctic Wolf recognizes that success comes from delighting our customers so we work together to ensure that happens every day. We believe in diversity and inclusion and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate thatby protecting peoples and organizations sensitive data and seeking to end cyber risk we get to work in an industry that is fundamental to the greater good.

We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here.

We also believe and practice corporate responsibility and have recently joined the Pledge 1% Movement ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.

All wolves receive compelling compensation and benefits packages including:

• Equity for all employees
• Flexible time off and paid volunteer days
• RRSP and 401k match
• Training and career development programs
• Comprehensive private benefits plan including medical mental health dental disability life and AD&D and value-added services
• Robust Employee Assistance Program (EAP) with mental health services
• Fertility support and paid parental leave

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race color religion sex orientation national origin age disability genetics or any other basis forbidden under federal provincial or local law. Arctic Wolf is committed to fostering a welcoming accessible respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such we strive to make our entire experience as accessible as possible and provideaccommodationsas required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodation by emailing . View our Hiring Page to learn more about our application process.

Security Requirements

• Conducts duties and responsibilities in accordance with AWNs Information Security policies standards processes and controls to protect the confidentiality integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).
• Background checks are required for this position.
• This position may require access to information protected under U.S. export control laws and regulations including the Export Administration Regulations (EAR). Please note that if applicable an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.