Deputy CISO

Why Black and Veatch

Black & Veatch allows you to lend your talent and perspective to humanity’s biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation; 401K match and benefits that start day 1. 

Our hybrid environment allows you to balance your work and personal life. At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.

The Opportunity

The Deputy Chief Information Security Officer (DCISO) is a senior executive leader responsible for the development, implementation, and management of the risk management posture and chief architect in designing solutions to improve that posture. The DCISO reports to the CISO, assuming the role when necessary, and plays a crucial part in driving transformational improvements in cybersecurity processes and capabilities. The DCISO ensures that information assets and technologies are adequately protected against current and emerging threats, has a solid understanding of where the company implements preventative versus detective controls and balances user experience. This role involves collaboration with various stakeholders to foster a culture of security awareness and compliance throughout the organization.

Key Responsibilities

• Develop and implement a comprehensive information security improvement strategy aligned with organizational goals and objectives with measurable outcomes and risk reduction.
• Create, communicate, and gain buy-in to an enterprise-wide cyber risk management process, set of metrics, and statement of impact based on the company’s current state of IT architecture, platforms, controls and processes.
• Lead the architecture, implementation, and management of security program initiatives to protect information systems, networks, and data across all D&IT domains.
• Develop and implement cyber security strategy, including budgeting, planning, and program prioritization. Oversee the daily operations of the cyber security program as chief of staff in cyber security.
• Collaborate with D&IT and other departments to integrate security into system development and operational processes.
• Oversee the development and enforcement of information security policies, standards, and procedures in implementation of all new D&IT programs and projects.
• Conduct risk assessments, penetration tests and vulnerability analyses to identify and mitigate security risks.
• Ensure compliance with relevant legal, regulatory, and industry standards.
• Prepare and present regular reports to the executive team on the status of the information security program.
• Stay current with the latest security trends, technologies, and regulatory requirements.
• Lead and mentor the cyber security architecture team, fostering a collaborative and high-performance environment.
• Participate in business continuity, impact analysis and disaster recovery planning and testing.
• Establish and maintain relationships with external stakeholders, including regulatory bodies, law enforcement, and industry peers.
   

Management Responsibilities

Preferred Qualifications

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field.
• Minimum of 15 years of experience in information security management, with at least 5 years in a senior leadership role.
• Direct experience in threat management, threat hunting, and attribution of both organized crime and nation-state actors
• Direct experience with government entities like the Department of Energy or Department of Defense
• Extensive knowledge of information security frameworks, standards, and best practices (e.g., NIST, ISO 27001, CIS).
• Experience with risk management, threat analysis, and incident response.
• Strong understanding of regulatory requirements and compliance (e.g., GDPR, HIPAA, CCPA).
• Professional certifications such as CISSP, CISM, or CISA are beneficial.
• Excellent leadership, communication, and interpersonal skills.
• Strategic thinker with the ability to align security initiatives with business objectives.
• Proven track record of building and leading high-performing security teams.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
   

Minimum Qualifications

• Bachelor's Degree (in CS or MIS or related field). Information Security Certifications such as Certified Information Systems Security Professional Certification (CISSP) or Certified Information Security Manager (CISM) required. ITIL certification required.
• All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Work Environment/Physical Demands

Typical office environment with a hybrid work schedule: 3 days in office and 2 days remote 

Salary Plan

Job Grade