Deputy CISO

Come join Deepwatch’s team of world-class cybersecurity professionals and the brightest minds in the industry. If you're ready to challenge yourself with work that matters, then this is the place for you. We're redefining cybersecurity as one of the fastest growing companies in the U.S. – and we have a blast doing it!

Who We Are

Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatch’s cloud-based security operations platform, Deepwatch provides the industry’s fastest, most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business.

Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit.

Deepwatch recognition includes:

2025, 2024, 2023, 2022 and 2021 Great Place to Work® Certified

2026, 2025, 2024, 2023, 2022 Forbes America's Best Startup Employers

2025 Cybersecurity Breakthrough Award: Managed Security Solution of the Year

2025 CRN Security 100 - Top 20 Endpoint and Managed Security Companies

2024 Military Times Best for Vets Employers

2024 US Department of Labor Hire Vets Gold Award

2024 Cyber Defense Magazine, Global Infosec Awards

2023 LinkedIn Top 50 Startups

2023 InHerSight #1 Cyber Workplace for Women

2023 and 2022 Fortress Cybersecurity Award

Backed by premier investors with >$275 Million in growth capital from Goldman Sachs, Vista Equity Partners, Springcoast, Splunk Ventures, and ABS Capital

• Reports To: Chief Information Security Officer
• Department: Information Security
• Location: Remote, EST timezone preferred

The Deputy Chief Information Security Officer will serve as the CISO’s senior operating partner and second-in-command for the Information Security organization. This person will help run the department day-to-day, drive execution across security, IT, cloud, compliance, privacy, and risk workstreams, and ensure the security program is organized, measurable, accountable, and aligned with business needs.

This is a highly hands-on leadership role. The Deputy CISO will be expected to lead teams, make decisions, run operating rhythms, manage 1:1s and team meetings, track project execution, rebuild and mature the security program, and represent the department across the business. The ideal candidate is a strong security leader and operator who can move between executive strategy, technical detail, people leadership, audit readiness, incident response, and project execution without needing constant direction.

This person will report directly to the CISO and will be trusted to act on behalf of the CISO in key meetings, decisions, escalations, and cross-functional workstreams.

Department Leadership and Operations:

Run the day-to-day operating cadence of the department, including team meetings, leadership meetings, 1:1s, project reviews, status reporting, and executive updates.

Lead, mentor, and develop security, IT, cloud, compliance, and risk team members as assigned.

Build a high-performing, accountable, execution-focused culture across the security organization.

Represent the security organization with executives, customers, auditors, legal, privacy, engineering, product, IT, and business stakeholders.

Ensure the CISO has clear visibility into department performance, project health, risks, blockers, resource needs, and key decisions.

Develop and refine security strategy in alignment with business goals, customer expectations, regulatory requirements, and industry best practices.

Establish measurable security outcomes, KPIs, dashboards, QBRs, and executive reporting that show progress, risk, and business value.

Drive maturity across vulnerability management, incident response, identity and access management, endpoint security, cloud security, MDR/SOC operations, GRC, IT operations, and security engineering.

Drive projects from intake through completion with clear owners, deadlines, milestones, dependencies, decisions, risks, and next steps.

Maintain accurate project tracking, dashboards, Jira/Confluence hygiene, timelines, meeting notes, and executive summaries.

Hold project owners accountable for commitments, updates, deadlines, and follow-through.

Lead internal and external audit readiness, response, evidence collection, remediation, and ongoing compliance activities.

Oversee compliance programs and control frameworks such as SOC 2, ISO 27001, ISO 42001.

Partner with Legal, Privacy, Finance, IT, Engineering, Product, and business leaders to align governance activities with company objectives.

Help run or mature the risk committee and ensure organizational risks are identified, documented, prioritized, tracked, and remediated.

Maintain policies, standards, procedures, and controls that protect company and customer data.

Serve as a key liaison with auditors, customers, regulators, vendors, and internal stakeholders.

Lead incident response activities, ensuring timely coordination, communication, containment, recovery, and post-incident improvement.

Conduct and oversee risk assessments, threat modeling, vulnerability management, and security reviews.

Guide secure cloud architecture and governance across AWS, Azure, GCP, or similar cloud environments.

Evaluate tools, vendors, services, and resourcing needs to support the security program.

Drive continuous improvement through automation, better workflows, stronger documentation, and clearer accountability.

Required Qualifications:

10+ years of progressive experience across cybersecurity, IT, security operations, cloud security, compliance, risk, or related technical leadership roles.

5+ years of people leadership experience, including managing teams, leaders, 1:1s, performance expectations, and department operating rhythms.

Proven ability to run a security department or major security program with minimal supervision.

Strong hands-on understanding of security, IT, cloud, compliance, privacy, and risk operating models.

Experience rebuilding or maturing a security program, including controls, processes, metrics, governance, and reporting.

Demonstrated experience managing audits, compliance programs, evidence collection, control tracking, remediation, and executive communication.

Strong project and program execution skills, including ownership of deadlines, dependencies, priorities, blockers, and cross-functional follow-through.

Ability to communicate complex security and risk topics clearly to technical, non-technical, executive, customer, and board-level audiences.

Experience partnering with Legal, Privacy, Product, Engineering, IT, Finance, Sales, Customer Success, and executive leadership.

Strong judgment, discretion, urgency, ownership, and ability to make decisions in ambiguous situations.

Experience with Jira, Confluence, dashboards, executive reporting, QBRs, and operational metrics.

Preferred Qualifications:

Experience in SaaS, cloud-first, managed security services, MDR, or technology-driven environments.

Deep experience with frameworks and standards such as SOC 2, ISO 27001, PCI, HIPAA, NIST, GDPR, CCPA, and ISO 42001.

E