Vice President, Chief Information Security Officer

Vista Equity Partners - Boston, MA

Full-time - Executive

Boston, MA

Funds, Trusts, and Other Financial Vehicles

About the position

As the Vice President, Chief Information Security Officer (CISO) at Quickbase, you will play a pivotal role in leading our information security organization. Reporting directly to the Head of Engineering, you will be responsible for managing a dedicated team of security professionals tasked with ensuring the security and privacy of our Software as a Service (SaaS) offerings and core back-office systems. This position is critical in safeguarding our organizational assets and personnel while maintaining compliance with industry standards and regulations. In this leadership role, you will be instrumental in building and developing a robust team of security and privacy experts. You will work closely with our Governance Risk Compliance (GRC) team to establish appropriate standards and risk controls that align with our organizational goals. Your expertise will be essential in enhancing our Application Security (App Sec) and DevSecOps practices, fostering a culture of security awareness and best practices across the organization. You will collaborate with product and infrastructure teams to create a comprehensive roadmap for security and privacy features, ensuring that security architecture is integrated into the Product Development Lifecycle. Additionally, you will maintain third-party risk controls and conduct annual reviews in partnership with the GRC team. Your role will also involve researching and deploying cutting-edge technology solutions and innovative security management techniques to protect our organization. As a key member of the senior leadership team, you will facilitate risk assessment and management processes, working directly with GRC to ensure that our security posture is robust and effective. You will also engage in pre-sales activities, including responding to Requests for Proposals (RFPs) and conducting security and privacy reviews during the sales process, providing assurance and education to prospective clients' CISO, IT, and legal teams.

Responsibilities

• Buildout and lead a team of security and privacy professionals in securing the Quickbase SaaS and back-office platforms.
• Establish appropriate standards and associated risk controls in partnership with our Governance Risk Compliance (GRC).
• Develop our App Sec and DevSecOps expertise and communities of practice.
• Collaborate with product & infrastructure teams to develop a roadmap for security & privacy features and maintain a baseline for security & privacy architecture.
• Maintain third-party risk controls and conduct annual reviews alongside our GRC team.
• Partner with Engineering and Product teams to embed security & privacy into the Product Development Lifecycle.
• Research and deploy state-of-the-art technology solutions and innovative security management techniques.
• Work directly with senior leadership and GRC to facilitate risk assessment and risk management processes.
• Participate in pre-sales and client-facing activities, including RFP responses and security & privacy reviews.

Requirements

• 10+ years of information security experience across a variety of disciplines including DevSecOps.
• 5+ years of leadership in at least two disciplines of information security.
• Proven success in hiring, developing, and leading high-performing security teams.
• Demonstrated success partnering with sales organizations to support customer security requests.
• Experience deploying a security operations center (on-premise, hybrid, or MSSP).
• Familiarity with agile (scaled) software development and product security best practices.
• Experience with cloud computing/elastic computing across virtualized environments (AWS preferred).
• Knowledge of common information security management frameworks, such as ISO/IEC 27001 and NIST.
• Knowledge of common technologies used in securing back-office environments (IAM, PKI, Network Controls), with a preference for Microsoft 365 tooling.