Vice President, Chief Information Security Officer

American Tower - Cary, NC

Full-time - Executive

Cary, NC

1,001-5,000 employees

Heavy and Civil Engineering Construction

About the position

The Vice President, Chief Information Security Officer (CISO) at American Tower is responsible for establishing and maintaining the company's enterprise-wide information security vision, strategy, and programs. This role ensures that information, assets, and technologies are adequately protected while collaborating with senior management and key stakeholders to implement security projects that align with business objectives. The CISO will lead a team of security professionals, manage incident response activities, and develop relationships with external vendors and government agencies.

Responsibilities

• Develop and implement a strategic, long-term information security strategy and roadmap.
• Lead the information security function across the company to ensure consistent and high-quality information security management.
• Provide regular reporting on the status of the information security program to senior business leaders and the board of directors.
• Identify, evaluate, and report on information security risks in compliance with regulatory requirements.
• Develop and enhance an information security management framework based on industry standards and best practices.
• Create and manage information security and risk management awareness training programs for all employees.
• Review and lead the enterprise-wide incident response program and manage security breaches.
• Develop, implement, and oversee effective disaster recovery policies and procedures.
• Collaborate with IT and business leaders to manage security vulnerabilities and ensure the security of information assets.
• Prepare materials and presentations for the board and reports for senior leaders.

Requirements

• Bachelor's degree in computer science, Information Systems, or a related field.
• Master's degree and information security industry certifications (such as CISSP) preferred.
• Minimum of 15 years of experience in information security and IT roles.
• Detailed knowledge of information security management frameworks such as ISO/IEC 27001/2, NIST, and CIS.
• Understanding of security architecture design, network security, vulnerability management, and risk analysis.
• Excellent written and verbal communication skills, with the ability to communicate security concepts to technical and nontechnical audiences.
• Proven track record in developing information security policies and executing programs in a dynamic environment.
• Ability to develop and articulate a long-term vision for global information security strategy.
• Expertise in hiring and managing third-party information security consultants.
• Deep understanding of evolving cybersecurity threats and their impacts.

Nice-to-haves

• Experience leading incident response efforts during information security breaches at publicly traded companies.
• Strong organization, planning, and project management skills.

Benefits

• Competitive salary and performance bonuses.
• Comprehensive health insurance coverage.
• 401(k) retirement savings plan with company matching contributions.
• Paid time off and holidays.
• Professional development opportunities and training programs.