Chief Information Security Officer (CISO) - JR101225-7366

Baker Tilly Advisory Group, LP - Chicago, IL

Full-time - Executive

Chicago, IL

10,001+ employees

About the position

The Chief Information Security Officer (CISO) at Baker Tilly will be responsible for developing and implementing an enterprise-wide cybersecurity strategy. This newly created role is part of the executive leadership team and will focus on protecting the organization's digital assets, intellectual property, and sensitive information. The CISO will lead the information security function, assess and manage cybersecurity risks, and ensure compliance with regulatory and industry standards, while aligning security initiatives with business goals.

Responsibilities

• Develop, implement, and maintain a comprehensive cybersecurity strategy that supports business objectives and reduces risk across the organization.
• Serve as the executive leader responsible for information security, guiding senior leadership on cybersecurity issues, governance, and risk management.
• Lead the security incident response program, including planning, detection, response, and recovery to cyber threats.
• Identify, assess, and mitigate security risks to the organization’s information systems and data.
• Lead the cybersecurity operations committee, providing the Chief Risk Officer and Chief Executive Officer with input into the enterprise risk management process.
• Inform the risk committee and board of directors, as appropriate, on cybersecurity risks, initiatives and material incidents.
• Measure and maintain compliance with relevant regulations, standards, and legal requirements (e.g., GDPR, HIPAA, SOX, PCI-DSS).
• Collaborate with legal, privacy, audit, information technology, compliance and other teams to ensure alignment.

Requirements

• Proven experience in developing and implementing cybersecurity strategies at an enterprise level.
• Strong leadership and strategic thinking skills.
• Crisis management leadership skills.
• Excellent risk assessment and mitigation skills.
• Ability to align security initiatives with business goals.
• Strong problem-solving and decision-making skills under pressure.
• Exceptional interpersonal, communication, and collaboration skills.

Nice-to-haves

• Experience with regulatory compliance frameworks such as GDPR, HIPAA, SOX, and PCI-DSS.
• Familiarity with cybersecurity technologies and tools.
• Experience in a consulting or advisory role.

Benefits

• Health insurance
• 401k plan with matching contributions
• Paid time off
• Professional development opportunities
• Flexible work arrangements