About the RoleThe Chief Information Security Officer (CISO) is a senior business leader who will oversee all aspects of data privacy, compliance, and security for Validity.&nbsp; The person in this position will create and manage business-aligned security, compliance, and data privacy programs by developing, documenting, implementing, and maintaining comprehensive security compliance and privacy frameworks. The CISO will build and manage the teams responsible for daily operations in support of these frameworks, providing strong risk management, control procedures, and incident response support for company operations.&nbsp; The successful candidate will form close relationships with executive leaders to determine acceptable levels of business risk and will foster strong working relationships with business stakeholders to work collaboratively to improve Validity’s security compliance and privacy posture. Position Duties and Responsibilities<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Develop, implement, and monitor strategic, comprehensive, enterprise information security and IT risk management programs.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Define, build, and lead an Information Security organization in support of team mission and defined information security programs.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Manage and maintain ongoing SOC 2 and ISO audit programs and requirements.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Work with Executive Leadership to define acceptable levels of business risk.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Serve as the company spokesperson, providing timely Sales Support for Information Security and Data Privacy matters.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Work collaboratively with engineering and product management teams to ensure “privacy and security by design” and satisfaction of regulatory obligations in new products and product features.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Work directly with the business units to facilitate risk assessment and risk management processes.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Conduct 3rd party security and privacy risk assessments to identify areas of unexpected risk to business and technology operations.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Assist with the overall business technology planning, providing a future vision of technology and systems.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Develop metrics for evaluating the effectiveness and success of the security and privacy frameworks to ensure they meet the needs of all internal and external stakeholders.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Establish and administer a process for receiving, documenting, investigating, and responding to complaints and/or allegations of violations of Validity’s privacy policies and procedures.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Lead all privacy and security governance efforts to ensure alignment of the privacy and security program to the needs of the organization as well as legal and regulatory requirements.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Build and periodically test incident response programs based on business risk analysis.</li>
</ul> Required Experience, Skills, and Education<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Minimum of eight to 12 years of experience in a combination of risk management, information security, and IT roles within a SaaS company.&nbsp; SaaS experience is a must.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Minimum of 5 years of experience in a senior leadership role.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Successful track record of implementing corporate security and privacy, and governance programs.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Proven senior leadership skills - the ability to balance team and individual responsibilities; building teams and consensus; ability to influence and get things done through others not directly reporting to you.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Deep and demonstrable knowledge of common information security management frameworks, such as SOC 2, ISO/IEC 27001, and NIST.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Deep knowledge of global privacy and security laws and regulations.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience with contract and vendor negotiations and vendor management including managed services.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Proven experience building security programs in Cloud computing/Elastic computing across virtualized environments.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Prior experience in SOX and/or highly regulated environments is preferred.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Well-developed analytical skills: ability to assess situations and complex problems quickly.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Strong consultative approach including listening, questioning, and devising a solution that fits well into the business and follows good security practice.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Demonstrate a high level of personal integrity.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Excellent communication skills - interpersonal, writing, telephone, group presentation, and creative problem-solving skills.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">An unquenchable thirst for learning and knowledge about current technology and security trends and stay on top of those topics regularly.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Industry certifications:&nbsp; CISSP, CIPM, CIPP, and/or other relevant credentials.</li>
</ul> About ValidityFor over 20 years, tens of thousands of organizations across the world have relied on Validity solutions to target, contact, engage, and retain customers – using trustworthy data as a key advantage. Validity’s flagship products – <a href="https://www.validity.com/products/demandtools/">DemandTools</a>, <a href="https://www.validity.com/products/briteverify/">BriteVerify</a>, <a href="https://www.validity.com/products/returnpath/">Return Path</a>, <a href="https://www.validity.com/products/trustassessments/">Trust Assessments</a>, and <a href="https://www.validity.com/products/gridbuddy/">GridBuddy </a>– are all highly rated, #1 solutions for sales and marketing professionals. These solutions deliver smarter email campaigns, more qualified leads, more productive sales, and ultimately faster growth. Validity is a truly unique company - massive revenue growth, top-tier investors, 5-star product ratings, proven ability to acquire and integrate top tech companies and welcome them into the Validity family, winning culture, and a work environment that fosters hard work, trust, and fun.Headquartered in Boston, Validity has offices in Tampa, Denver, Indianapolis, London, and Sydney. For more information, visit connect with us on <a href="https://www.linkedin.com/company/validityinc/">LinkedIn</a>, <a href="https://www.instagram.com/trustvalidity/">Instagram, </a>and <a href="https://twitter.com/TrustValidity">Twitter</a>.

**About the Role**

The Chief Information Security Officer (CISO) is a senior business leader who
will oversee all aspects of data privacy, compliance, and security for
Validity.

  

The person in this position will create and manage business-aligned security,
compliance, and data privacy programs by developing, documenting,
implementing, and maintaining comprehensive security compliance and privacy
frameworks. The CISO will build and manage the teams responsible for daily
operations in support of these frameworks, providing strong risk management,
control procedures, and incident response support for company operations.

  

The successful candidate will form close relationships with executive leaders
to determine acceptable levels of business risk and will foster strong working
relationships with business stakeholders to work collaboratively to improve
Validity’s security compliance and privacy posture.

 ****  

 **Position Duties and Responsibilities**

  * Develop, implement, and monitor strategic, comprehensive, enterprise information security and IT risk management programs.
  * Define, build, and lead an Information Security organization in support of team mission and defined information security programs.
  * Manage and maintain ongoing SOC 2 and ISO audit programs and requirements.
  * Work with Executive Leadership to define acceptable levels of business risk.
  * Serve as the company spokesperson, providing timely Sales Support for Information Security and Data Privacy matters.
  * Work collaboratively with engineering and product management teams to ensure “privacy and security by design” and satisfaction of regulatory obligations in new products and product features.
  * Work directly with the business units to facilitate risk assessment and risk management processes.
  * Conduct 3rd party security and privacy risk assessments to identify areas of unexpected risk to business and technology operations.
  * Assist with the overall business technology planning, providing a future vision of technology and systems.
  * Develop metrics for evaluating the effectiveness and success of the security and privacy frameworks to ensure they meet the needs of all internal and external stakeholders.
  * Establish and administer a process for receiving, documenting, investigating, and responding to complaints and/or allegations of violations of Validity’s privacy policies and procedures.
  * Lead all privacy and security governance efforts to ensure alignment of the privacy and security program to the needs of the organization as well as legal and regulatory requirements.
  * Build and periodically test incident response programs based on business risk analysis.

****  

**Required Experience, Skills, and Education**

  * **Minimum of eight to 12 years of experience in a combination of risk management, information security, and IT roles within a SaaS company.   SaaS experience is a must.**
  * **Minimum of 5 years of experience in a senior leadership role.**
  * Successful track record of implementing corporate security and privacy, and governance programs.
  * Proven senior leadership skills - the ability to balance team and individual responsibilities; building teams and consensus; ability to influence and get things done through others not directly reporting to you.
  * Deep and demonstrable knowledge of common information security management frameworks, such as SOC 2, ISO/IEC 27001, and NIST.
  * Deep knowledge of global privacy and security laws and regulations.
  * Experience with contract and vendor negotiations and vendor management including managed services.
  * Proven experience building security programs in Cloud computing/Elastic computing across virtualized environments.
  * Prior experience in SOX and/or highly regulated environments is preferred.
  * Well-developed analytical skills: ability to assess situations and complex problems quickly.
  * Strong consultative approach including listening, questioning, and devising a solution that fits well into the business and follows good security practice.
  * Demonstrate a high level of personal integrity.
  * Excellent communication skills - interpersonal, writing, telephone, group presentation, and creative problem-solving skills.
  * An unquenchable thirst for learning and knowledge about current technology and security trends and stay on top of those topics regularly.
  * Industry certifications:  CISSP, CIPM, CIPP, and/or other relevant credentials.

****  

**About Validity**

For over 20 years, tens of thousands of organizations across the world have
relied on Validity solutions to target, contact, engage, and retain customers
– using trustworthy data as a key advantage. Validity’s flagship products –
[DemandTools](https://www.validity.com/products/demandtools/),
[BriteVerify](https://www.validity.com/products/briteverify/), [Return
Path](https://www.validity.com/products/returnpath/), [Trust
Assessments](https://www.validity.com/products/trustassessments/), and
[GridBuddy ](https://www.validity.com/products/gridbuddy/)– are all highly
rated, #1 solutions for sales and marketing professionals. These solutions
deliver smarter email campaigns, more qualified leads, more productive sales,
and ultimately faster growth.

  

Validity is a truly unique company - massive revenue growth, top-tier
investors, 5-star product ratings, proven ability to acquire and integrate top
tech companies and welcome them into the Validity family, winning culture, and
a work environment that fosters hard work, trust, and fun.

Headquartered in Boston, Validity has offices in Tampa, Denver, Indianapolis,
London, and Sydney. For more information, visit connect with us on
[LinkedIn](https://www.linkedin.com/company/validityinc/), [Instagram,
](https://www.instagram.com/trustvalidity/)and
[Twitter](https://twitter.com/TrustValidity).

