Sr. Director, Chief Information Security officer (CISO)

Project Description

Lead enterprise cybersecurity program. This role is responsible for protecting customer, employee, financial, and operational data while supporting business growth, regulatory compliance, and AI innovation within the IT industry.

Job Duties (Core Technical Responsibilities)

       - Build and develop Aurum’s security team; provide strategic direction and mentorship across the function.
  - Represent security at the executive table, advising the CEO on risk posture, investment priorities, and long‑term strategy.
  - Manage Aurum’s security budget, tooling ecosystem, and multi‑year roadmap.
  - Set and execute Aurum’s enterprise security strategy, ensuring alignment with our data‑platform roadmap, customer commitments, and regulatory obligations (including FedRAMP).
  - Own Aurum’s security governance framework — policies, standards, and risk management practices that scale with our cloud‑native architecture.
  - Champion security‑by‑design across engineering, data pipelines, and cloud infrastructure, ensuring secure development practices are embedded without slowing delivery.
  - Oversee global data privacy and residency requirements (GDPR and other regional mandates) across Aurum’s distributed infrastructure footprint.
  - Define and enforce Aurum’s security model for AI/LLM usage, ensuring sensitive customer data remains within trusted boundaries.
  - Implement guardrails for AI‑driven workflows to prevent leakage, prompt injection, and unsafe outputs before they reach production.
  - Evaluate and pursue AI governance frameworks (e.g., ISO 42001) to strengthen customer trust and differentiate Aurum’s AI posture.
  - Oversee risk assessments for Google Cloud Platform/AWS/Azure environments and new product or architectural changes, translating technical risk into business impact for leadership.
  - Serve as a senior security voice in customer conversations, supporting Sales, Customer Success, and Compliance during due diligence and renewal cycles.
  - Mature Aurum’s compliance posture (FedRAMP, SOC 2, ISO 27001) in partnership with Compliance/Validation.
  - Produce scalable customer‑facing security collateral that clearly communicates Aurum’s security architecture and trust posture.
  - Lead cross‑functional response efforts involving Engineering, Legal, Compliance, and executive leadership.

Required Knowledge

  - 10+ years of security leadership with ownership of enterprise, product, or third‑party risk programs.
  - Deep experience securing Google Cloud Platform/AWS/Azure cloud environments in data‑intensive, analytics‑driven, or multi-cloud target architectures (spanning AWS GovCloud, Hadoop, Databricks, S3/Delta storage).
  - Proven expertise governing secure AI/LLM usage and data boundaries.
  - Advanced knowledge of cloud security, Identity and Access Management, SIEM/SOAR, threat intelligence, and security architecture.
  - Experience owning data platforms, data-zone standards, metadata conventions, and user role models.
  - Working knowledge of FedRAMP High / NIST 800-53 control families, SOC 2, ISO 27001, and GDPR.
  - Demonstrated ability to build risk registers, deliver executive‑level reporting, and translate complex concepts for cross-functional teams.
  - Strong troubleshooting, problem-solving, and system performance analysis abilities.