Business Information Security Officer

EVOTEK

Business Information Security Officer responsible for driving security strategy at EVOTEK. Leading initiatives in cybersecurity, compliance, and risk assessment across various domains.

Posted 6/2/2026full-timeRemote • California • 🇺🇸 United StatesSeniorLead💰 $150,000 - $190,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop, drive, and implement the overall information security program (goals, objectives, and policies) while establishing departmental goals and priorities to execute on that vision.
Establish a defined, consistent security architecture standard and work with business units to implement technical controls in line with cutting edge best in class security and privacy standards.
Drive domestic and international projects to meet emerging cyber security requirements, data protection and privacy laws.
Implement approved policies and procedures to ensure information security efforts are properly coordinated and in compliance to make recommendations for changes and improvements to reduce the overall security risk.
Monitor and assess the compliance of the organization with information security policies and procedures, while ensuring third-party compliance.
Oversee incident response planning, data loss prevention and remediation of breaches, serving as the focal point for response delivery.
Implement an ongoing risk assessment program targeting information security and privacy matters; recommend methods for vulnerability detection and remediation and perform and/or oversee vulnerability testing.
Coordinate and deliver information security reporting and assessments as required by regulatory agencies, clients, and management.
Work with peers across the company to review customer feedback/ requirements and ensure that security strategy and roadmaps are aligned with the security needs of customers.
Keep current on latest security and privacy legislation, regulations, alerts, and vulnerabilities pertaining to the organization. Conduct continual research to maintain knowledge of technology, customer needs and overall requirements.
Participate in key initiatives and projects to ensure that cybersecurity controls are accounted for early within the project and software development lifecycles.
Work with the division to ensure risk assessments are conducted on high-risk business applications. Provide escalation for high-risk issues arising from those assessments. Ensure remediation plans are tracked to completion.

Requirements

What you’ll need

Cyber Compliance Assessments & Regulatory Compliance experience
10+ years of Information Technology experience, with a background in Security and Compliance.
Seasoned track record of assessing threat and vulnerability from a business and technical perspective.
Ability to develop and champions pragmatic security solutions that support growth of the business.
Experience developing a strategic, comprehensive enterprise information security and IT risk and privacy management program.
Experience with supporting customer-facing products, not just internal.
Ability to create a culture of accountability and security.
Service Level Management experience.
Ability to communicate and engage effectively with a diverse audience, including front line technical staff, non-technical staff, management, executives, and vendors/providers.
Self-starter with the ability to lead tasks with demonstrated ability to work independently.

Benefits

Comp & perks

Salary commensurate with years’ of experience, technical expertise and geographic location.
Salary range: $150,000 to $190,000.
Performance bonuses.
Benefits package that includes 100% paid medical, dental and vision for the employee.
401(k) with employer match.
Strong company culture.
Flexible PTO policy.
Flexible working arrangements.
Annual company overnight retreat

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information security program developmentsecurity architecture standardcyber security requirementsdata protection lawsincident response planningdata loss preventionrisk assessment programvulnerability detectionvulnerability testingregulatory compliance

Soft Skills

communicationleadershipaccountabilityindependenceengagementcollaborationstrategic thinkingproblem-solvingcustomer focusadaptability