Chief Information Security Officer

Helia

CISO responsible for cybersecurity strategy and risk management at Genworth, ensuring safety of information assets. Partnering closely with executive leadership and board to drive cybersecurity agenda.

Posted 6/7/2026full-timeRichmond • New York, North Carolina, Virginia • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Establish and execute an enterprise information security strategy and operating model aligned with business objectives and risk appetite.
Continuously assess and strengthen Genworth’s cyber and technology risk posture in support of enterprise resilience and growth.
Define short‑ and long‑term cybersecurity goals, success measures, and investment priorities aligned to business strategy.
Define and operationalize a shared accountability model for cybersecurity risk, ensuring clear decision rights across the CISO, CIO, and technology/service owners.
Ensure security is embedded early in technology strategy, roadmaps, and delivery, with integrated planning across engineering, infrastructure, and application teams.
Drive consistency and scale in control execution, reducing late-stage rework, fragmentation, and reliance on exception-based decisioning.
Own enterprise information security governance, policies, standards, and controls.
Lead regulatory engagement related to cybersecurity and represent the enterprise in examinations and audits.
Oversee internal and external IT compliance efforts and remediation activities.
Serve as a strategic advisor to executive leadership and the Board of Directors on cyber risk, threat trends, and program effectiveness.
Own Board‑level cybersecurity governance, including regular reporting on cyber risk posture, material threats, incidents, and progress against enterprise risk tolerance.
Communicate cyber risk in a decision-ready format, clearly articulating recommendations, tradeoffs, risk levels, and required actions, enabling timely and informed leadership decisions.
Provide executive oversight of security operations, vulnerability management, incident response, and crisis management.
Lead enterprise response efforts during cybersecurity incidents, ensuring decisiveness, transparency, and cross‑functional coordination.
Stay ahead of emerging threats, technologies, and industry trends to proactively adapt security capabilities.
Lead, develop, and inspire a high‑performing information security organization.
Champion a culture of security awareness, accountability, ethical behavior, and continuous improvement across the enterprise.
Build trust‑based relationships with internal and external stakeholders to influence outcomes in complex and high‑stakes environments.

Requirements

What you’ll need

15+ years of progressive experience across cybersecurity, technology, and risk disciplines, including 10+ years in senior leadership roles with accountability for enterprise‑wide outcomes.
Proven ability to build, lead, and develop high‑performing security teams with measurable impact.
Proven success establishing and executing an enterprise information security strategy aligned with business objectives and risk appetite.
Demonstrated ability to translate complex cyber and technology risks into clear, actionable insights for executive leadership and the Board of Directors.
Experience leading enterprise cybersecurity programs within large, complex, and highly regulated organizations.
Experience overseeing enterprise security operations, including vulnerability management, monitoring, incident response, and crisis management.
Advanced understanding of current and emerging cyber threats and vulnerabilities, with the ability to adapt security capabilities proactively.
Experience leading enterprise response efforts during significant cybersecurity incidents or operational disruptions.
Demonstrated expertise in information security governance, regulatory compliance, data privacy, and enterprise control frameworks.
Experience leading internal and external IT audits and managing remediation efforts.
Proven ability to partner effectively with regulators and external oversight bodies.
Broad technology experience spanning applications, infrastructure, cloud computing, and virtualized environments.
Experience managing vendor and third‑party risk, including managed security services and contract negotiations.
Strong understanding of how technology solutions protect enterprise data, systems, and networks at scale.
Experience protecting highly sensitive policyholder, financial, and health‑related information in regulated environments.

Benefits

Comp & perks

Competitive Compensation & Total Rewards Incentives
Comprehensive Healthcare Coverage
Multiple 401(k) Savings Plan Options
Auto Enrollment in Employer-Directed Retirement Account Feature (100% employer-funded!)
Generous Paid Time Off – Including 12 Paid Holidays, Volunteer Time Off and Paid Family Leave
Disability, Life, and Long Term Care Insurance
Tuition Reimbursement, Student Loan Repayment and Training & Certification Support
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
Caregiver and Mental Health Support Services

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity strategyrisk managementvulnerability managementincident responsedata privacyinformation security governanceregulatory compliancecloud computingenterprise control frameworkssecurity operations

Soft Skills

leadershipcommunicationstrategic advisingrelationship buildingteam developmentdecision-makinginfluencetransparencyaccountabilitycontinuous improvement