- Company Name
- Accommodations Plus International
- Job Title
- VP, Cybersecurity
- Job Description
-
**Job Title:**
VP, Cybersecurity
**Role Summary:**
Lead the development, execution, and continual improvement of an enterprise-wide cybersecurity strategy. Own security architecture, compliance, incident response, and security operations, while driving a culture of security awareness across the organization.
**Expectations:**
- Shape and align security posture with business objectives.
- Deliver measurable reductions in incidents and enhance proactive defenses.
- Ensure compliance with ISO27001, SOC 2 Type II, GDPR, PCI‑DSS and NIST frameworks.
- Motivate and influence cross‑functional teams to embed best‑practice security in product and operations.
**Key Responsibilities:**
- Own and evolve enterprise-class security systems and controls.
- Design, implement, and maintain architecture that mitigates emerging threats.
- Collaborate with application leaders to secure software life‑cycle (OWASP, SonarQube, Qualys).
- Identify and remediate design gaps in current and proposed infrastructures.
- Provide training and foster security awareness across the organization.
- Conduct system tests, continuous monitoring, and disaster‑recovery drills.
- Lead incident response: detection, containment, post‑mortem, and lessons‑learned.
- Manage third‑party security vendors, tools, and services.
- Oversee identity and access management (IAM).
- Serve as the primary security architect for Windows, *nix, and cloud (AWS, Azure).
**Required Skills:**
- 15+ years in cybersecurity, security architecture, or network defense.
- Expertise in NIST, ISO27001, SOC 2, PCI‑DSS, GDPR.
- Proven incident‑response leadership; experience with forensics, intrusion, malware analysis.
- Strong influence‑based leadership (no direct reports required).
- Deep knowledge of Windows, *nix, and cloud security fundamentals.
- Practical experience with IAM, cloud security, APT, DoS, and insider threats.
- Ability to translate risk into actionable architecture and policy.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Computer Engineering, Networking, or related field.
- CISSP mandatory; additional certifications desired: CCSK, CEH, CISA, CISM, SANS courses.
- Advanced degree (MBA, MS in Cybersecurity, etc.) preferred.