- Company Name
- IDEXX
- Job Title
- Deputy Chief Information Security Officer, Deputy CISO
- Job Description
-
**Job Title**
Deputy Chief Information Security Officer (Deputy CISO)
**Role Summary**
Senior leadership position reporting to the CISO, responsible for operating and advancing the global cybersecurity program. Leads Security Operations, Vulnerability Management, and Customer Identity and Access Management (CIAM), delivering operational excellence and strategic direction to embed security across the enterprise.
**Expectations**
- Deliver measurable improvements to detection, response, and automation.
- Build a risk‑based, closed‑loop Vulnerability Management lifecycle.
- Design & launch secure, scalable CIAM solutions for customer platforms.
- Mentor and grow high‑performance security teams.
- Partner with business and technology leaders to embed security into initiatives.
- Represent InfoSec at executive and board levels, aligning risk with business objectives.
- Ensure compliance with NIST, CIS, ISO 27001, and other regulatory frameworks.
**Key Responsibilities**
- Lead the Security Operations team: real‑time detection, incident response, and automation.
- Expand and mature the Vulnerability Management program: asset discovery, remediation tracking, reporting.
- Design, develop, and launch CIAM capabilities, ensuring secure authentication and access.
- Build, coach, and succession‑plan security teams.
- Collaborate with CISO to shape long‑term cybersecurity strategy.
- Embed security into development, operations, and transformation initiatives.
- Represent InfoSec in executive/board discussions; translate security needs into business decisions.
- Drive change management to foster a security‑first culture.
- Maintain alignment with industry and regulatory standards.
**Required Skills**
- 10+ years of cybersecurity experience, 5+ years in senior leadership.
- Proven track record building Security Operations, incident response, Vulnerability Management, and CIAM programs.
- In‑depth knowledge of NIST, CIS, ISO 27001 frameworks and best practices.
- Strong executive presence; adept at communicating technical and business perspectives.
- Ability to manage complex projects, lead cross‑functional teams, and drive enterprise change.
- Strategic thinking and data‑driven decision making.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field (Master’s preferred).
- Certifications strongly preferred: CISSP, CISM, GIAC, or equivalent.