Vice President, Deputy CISO

• Directly manages the Security Engineering, Security Operations (SecOps), and GRC functions, including hiring, performance management, and development of each team's leadership.
• Sets strategy and priorities across security engineering, security operations, and GRC, ensuring the three functions operate as one coordinated program.
• Owns the organization's security governance framework and compliance posture against industry frameworks and regulations (e.g., SOC 2, ISO 27001/27701, NIST CSF/800-53, PCI DSS, GDPR, CCPA), including third-party risk management and audit oversight.
• Oversees the security engineering roadmap and the operation of security monitoring, threat detection, and incident response, including post-incident governance and regulatory notification.
• Owns the enterprise security risk management program, including risk assessment, treatment, reporting, and the organization's risk register.
• Manages the combined budget for security engineering, SecOps, and GRC, and contributes to enterprise security budget planning alongside the CISO.
• Provides leadership continuity in the CISO's absence, including strategy execution, decision-making, and representation at the executive and board levels.
• Delivers security metrics, KPIs, and risk reporting to executive leadership, the board, and audit or risk committees.
• Partners with Legal and Privacy to align security requirements with contractual, regulatory, and privacy obligations, including customer due diligence and RFP responses.
• Acts as a representative for Arctic Wolf's security and compliance posture with customers, auditors, regulators, and senior executives.

• 8+ years of leadership experience directly managing security engineering, security operations, or GRC teams.
• 10+ years of progressive information security experience spanning both technical security engineering functions and GRC.
• Demonstrated experience building and leading enterprise risk management programs, including risk assessment, risk registers, and reporting to executive leadership.
• Demonstrated experience managing SOC 2, ISO 27001, or similar certification and audit processes from initiation through completion.
• Experience with international industry security standards (NIST, ISO, SOC 2) and data privacy regulations (GDPR, CCPA, and other regional standards).
• Experience managing third-party and vendor risk management programs.
• Ability to establish executive-level relationships across business and technology leadership and manage competing priorities under pressure.
• A Bachelor's Degree in Computer Science, Information Systems, Engineering, or a related technical field.
• Deep knowledge of information security governance, risk management, and compliance (GRC) frameworks, including NIST CSF, NIST 800-53, ISO 27001/27701, SOC 2, and CIS Controls.
• Demonstrated ability to lead security engineering and security operations teams, including secure architecture, SOC operations, and incident response.
• Experience designing and operating enterprise risk assessment, risk register, and audit or certification processes (e.g., SOC 2 Type II, ISO 27001).
• Strong understanding of data privacy regulations, including GDPR and CCPA/CPRA, and third-party risk management practices.
• Familiarity with Secure SDLC, DevSecOps, and security automation practices.
• Strong executive communication, board reporting, and stakeholder management skills.
• Ability to translate technical and regulatory risk into business risk language for non-technical audiences.

• Experience serving as a CISO, Deputy CISO, or acting CISO.
• Relevant industry certification(s) such as CISSP, CISM, CRISC, or CISA.
• Master's degree in a related field, or MBA.
• Experience in a regulated industry, such as financial services, healthcare, or SaaS/cybersecurity.
• Familiarity with GRC platforms, tools, and automation (e.g., Archer, OneTrust, Vanta, or Drata).

Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that - by protecting people's and organizations' sensitive data and seeking to end cyber risk - we get to work in an industry that is fundamental to the greater good.

We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity here .

We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities.

All wolves receive compelling compensation and benefits packages, including:

• Equity for all employees
• Flexible time off and paid volunteer days
• RRSP and 401k match
• Training and career development programs
• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services
• Robust Employee Assistance Program (EAP) with mental health services
• Fertility support and paid parental leave

Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodation by emailing recruiting@arcticwolf.com . View our Hiring Page to learn more about our application process.

• Conducts duties and responsibilities in accordance with AWN's Information Security policies, standards, processes, and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).
• Background checks are required for this position.
• This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations ("EAR"). Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations.