Chief Information Security Officer

VP / Chief Information Security Officer - $300,000 - $360,000 + 20% bonus Herndon, VA | Hybrid A large global software company is seeking a transformative VP / Chief Information Security Officer to lead enterprise, product, cloud, cyber-risk, and AI security. This is a strategic business-partnering role—not a controls-only position. The CISO will help the company move faster with confidence by embedding security across Product, Engineering, IT, Sales, Services, Legal, Finance, and corporate functions. The opportunity You will: Define enterprise security strategy, risk appetite, operating model, and investment prioritiesLead security operations, threat detection, vulnerability management, incident response, crisis management, and cyber resilienceAdvance product and application security through secure-by-design, threat modeling, secure SDLC, and software supply-chain practicesBuild an AI security and governance program covering responsible AI use, sensitive data, AI agents, model and prompt security, AI-generated code, third-party providers, and emerging threatsStrengthen customer trust, audit readiness, third-party risk, privacy partnership, and regulatory preparednessEstablish executive and Board-level security metrics focused on business risk, resilience, customer confidence, and AI readinessBuild and develop a high-performing, collaborative security organization Your first-year impact You will establish the enterprise security baseline, identify the highest-risk systems and AI use cases, improve remediation and incident response, clarify security ownership across distributed teams, and deliver a prioritized roadmap balancing risk reduction, investment, customer commitments, and business speed. Ideal background You have already served as a CISO, enterprise-wide Deputy CISO, or VP of Security in a global software, SaaS, or technology company. You bring experience across product security, cloud-native environments, application security, identity, security engineering, detection and response, software supply-chain risk, customer assurance, AI governance, and executive communication. Most importantly, you know how to challenge leaders constructively, make risk-based decisions, and position security as an enabler of trusted growth.