Chief Information Security Officer (CISO)

Job Title: Chief Information Security Officer (CISO)
Type: Direct Hire
Location: Onsite Orlando, FL

Job Description:

The organization is seeking a highly tactical, action-oriented Chief Information Security Officer (CISO) to lead enterprise-wide security strategy and execution. This role requires deep hands-on technical expertise in a SaaS-focused environment, with a strong emphasis on securing business-critical applications. The ideal candidate balances governance and risk management with direct execution, remaining closely engaged with both executive leadership and day-to-day security operations.

Key Responsibilities:

• Own and execute the enterprise information security strategy with a primary focus on SaaS applications.
• Secure and govern critical business systems, with Salesforce as the most important application.
• Establish and enforce application security best practices, including custom code review and access control policies.
• Lead proactive vulnerability management initiatives, including threat hunting and remediation.
• Perform and oversee penetration testing focused on SaaS platforms.
• Manage security operations including log analysis, investigations, and threat detection.
• Oversee business continuity, disaster recovery, and physical security programs.
• Utilize Microsoft Defender and Microsoft Sentinel for monitoring, detection, and response.
• Maintain strong security governance while remaining hands-on and execution focused.
• Partner closely with executive leadership through regular in-person collaboration.

Required Skills and Experience:

• Experience as a VP, Senior Director, BISO, or equivalent security leader within a 10,000+ employee organization.
• Extensive hands-on experience securing Salesforce in a SaaS environment (must have).
• Strong background in securing SaaS applications, including access controls and custom code security.
• Proven experience with vulnerability management, penetration testing, and threat hunting.
• Experience working with Microsoft security tools including Defender and Sentinel.
• Familiarity with NetSuite (ERP) and Office 365 security.
• Ability to work onsite in Orlando with no remote option.

Preferred Skills:

• Ownership of business continuity, disaster recovery, and physical security programs.
• Experience performing or overseeing secure code reviews.
• Prior people leadership experience (nice to have, not required).