Deputy Ciso Jobs (NOW HIRING)

Position Summary

The Chief of Staff to the Deputy Chief Information Security Officer (Deputy CISO) is aleadership role responsible for drivingexecution, alignment, and operationaldisciplineacross the cybersecurity organization. Reporting to the Deputy CISO and working closely with the Chief Information Security Officer (CISO), this leader serves as a strategic partner and force multiplier for cybersecurity priorities, ensuring that key programs, budget commitments, strategic initiatives, and executive deliverables are coordinated, measurable, and delivered with impact.

This role requires a seasoned,proactive, and highly organized professional who canoperateacross executive, business, technology, finance, and security teams. The Chief of Staff will help advance the Deputy CISO program by managing critical planning rhythms, supporting cybersecurity strategy, strengthening program governance, coordinating budget and resource planning, and enabling clear communication between the Deputy CISO, CISO, and enterprise stakeholders.

KeyResponsibilities:

• Strategic Execution & Program Management:

• Partner closely with the Deputy CISO to translatecybersecurity strategyinto actionablepriorities, coordinatedplans,andmeasurable outcomesacross the security organization.

• Lead cross-functional cyber program governance, ensuring major initiatives, milestones, dependencies, risks, and executive decisionsare trackedand driven to completion.

• Monitor progress against strategiccybersecuritygoals,identifyroadblocks,escalate issues appropriately,and proactivelyrecommendsolutionsto the Deputy CISO and CISO.

• Prepare executive-level updates, decision materials, and performance narratives for the Deputy CISO, CISO, and senior leadership forums.

• Develop and manage recurring cybersecurity status reports, executive briefings, leadership readouts, and program updates that clearly communicate progress, risks, decisions, and required actions.

• Create clear, concise, and audience-appropriate communications for the Deputy CISO and CISO, including talking points, leadership messages, presentation narratives, and enterprise-facing updates.

• Establish andmaintainthe Deputy CISO operating cadence, including leadership meetings, governance forums, business reviews, strategic planning sessions, and executive reporting routines.

• Drive alignment across cybersecurity programs to ensure priorities, funding, resourcing, sequencing, and delivery planssupportenterprise security strategy and risk reductionobjectives.

• Collaborate closely with cybersecurity leaders across security operations, governance, risk, compliance, engineering, architecture, identity, threat management, resilience, and related functions to align priorities, resolve dependencies, and advance enterprise cyberobjectives.

• Operational Excellence & Efficiency:

• Streamline andoptimizeoperational processes, communication flows, and decision-making frameworks within the securityorganization.

• Manage and prioritize critical communications, presentations, and deliverables for theDeputy CISO.

• Maintain an integrated communications calendar for key cybersecurity deliverables, leadership forums, enterprise updates, board materials, audit responses, and stakeholder engagement milestones.

• Supportcybersecuritybudget planning, resourceprioritization, financialgovernance, and investment trackingto ensure alignment withstrategicobjectivesand enterprise financial commitments.

• Partner with finance, procurement, and security leaders to support forecasting, budget reviews, investment cases, vendorspendvisibility, and resource allocation decisions.

• Develop andmaintainmechanisms for tracking cybersecurity program health, including key risks, dependencies, issues, decisions, performance indicators, and executive action items.

• Facilitate andprepare forkey meetings, including developing agendas, preparing materials, capturing minutes, and ensuring follow-up on action items.

• Executive & Stakeholder Engagement:

• Act asa trusted advisor and central coordination point for the Deputy CISO, whilemaintainingstrong partnership with the CISO and senior cybersecurity leadership team.

• Foster strong working relationships with cyber leaders to promote transparency, coordination, accountability, and consistent execution across the cybersecurity leadership team.

• Effectively communicate and collaborate with senior leaders across CVS Health, including the executive suite, legal, HR, finance, and other business units.

• Serve as a communication bridge between the Deputy CISO, CISO, cybersecurity leadership, business partners, and enabling functions to ensuretimelyinformation flow, message consistency, and coordinated follow-up.

• Build andmaintainstrong relationships with internal and external stakeholders to foster collaboration and drive consensus.

• Represent the Deputy CISO in selected forums, planning discussions, and stakeholder engagements as needed, ensuring decisions, actions, and follow-through remain aligned with CISO and Deputy CISO priorities.

• Attend, lead, andfacilitatemeetings on behalf of the Deputy CISO asappropriate,representingDeputy CISO priorities, guiding discussion, capturing key decisions, and ensuringtimelyfollow-up on actions and commitments.

• Coordinate sensitive, time-critical, or high-visibility cybersecurity matters on behalf of the Deputy CISO, ensuringappropriate stakeholderengagement, escalation, and follow-through.

• Analysis & Insights:

• Conduct research and analysisonindustry trends, competitive landscapes, and emerging technologies to inform strategic decisions.

• Develop insights and recommendations to support theDeputyCISO in critical decision-making processes.

• Prepare comprehensive reports and dashboards to track performance andidentifyareas for improvement.

• Produce dashboards, scorecards, and narrative reports that summarize cybersecurity program performance, budget status, risk posture, delivery progress, and key decisions for executive review.

• Identifytrends, emerging risks, and operational insights from program data, metrics, audits, assessments, and leadership inputs to inform Deputy CISO and CISO decision-making.

• Support preparation for board, executive committee, regulatory, audit, and enterprise risk discussions byconsolidatinginputs, clarifying messages, and ensuring materials areaccurateand actionable.

Required Qualifications

• 10+ years of experience in a fast-paced, complex organizational environment, with at least 3-5 years ina Chiefof Staff, strategic operations, or similar high-impact role supporting senior executives.

• Demonstrated experience in a large, matrixed organization, preferably within the healthcare or technology sectors.

• Strong execution skills:Proven ability todrive complex projects from conception to completion, managing multipleprioritiesand delivering results under pressure.

• Strategic mindset:Ability to understand complex business challenges, connect the dots across various initiatives, and contribute to the development of long-term strategies.

• Exceptional written and verbal communication skills, with the ability to articulate complex concepts clearly and concisely1to diverse audiences, including executive leadership.

• Highly proficient in developing compelling presentations and executive-level communications.

• Proven ability tointeract effectively with all levels of an organization, from individual contributors to the executive suite, with poise, professionalism, and influence.

• Strong analytical andproblem-solving skills, with a data-driven approach to decision-making.

• High degree of discretion and ability tohandleconfidential information with integrity.

• Bachelor's degree in Business Administration, Information Technology, Cybersecurity, ora relatedfield.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Security, Information Technology, Business Administration, ora relatedfield preferred.

• Experience in cybersecurity, security operations, risk management, or technology leadership support.

• Relevant cybersecurity, security program, governance, risk, or project/program management certifications preferred, such as CISSP, CISM, CRISC, CGEIT, PMP,PgMP, or similar credentials.

• Experience within a Fortune 100 organization.