Chief Information Security Officer (Remote)

Step Up For Students empowers families to pursue the most appropriate learning options for their children. We unite communities to provide scholarships that open doors to a stronger future. With this support, students can choose the right learning environment and access resources to reach their full potential.

Our culture is rooted in two core values:

• Everyone is an asset
• Every event is an improvement opportunity

These values guide how we work together and continuously improve. We expect every team member to bring these principles to life in their daily work.

The Chief Information Security Officer (CISO) is responsible for defining and executing the organization’s enterprise information security strategy to protect sensitive data, enable mission delivery, and ensure compliance with applicable laws and regulations. This executive leader safeguards family, donor, and organizational information while supporting secure, reliable access to Step Up’s programs and services.

Serving as a strategic partner to executive leadership, program leaders, and the Board, the CISO aligns cybersecurity initiatives with organizational priorities, risk tolerance, and available resources. The role requires a balance of strong technical expertise, business acumen, and mission-driven leadership to effectively manage risk, strengthen resilience, and advance the organization’s overall impact.

Location: Remote (United States)

Key Responsibilities:

• Develop and implement a comprehensive, risk-based cybersecurity strategy that aligns with the organization’s goals and mission.
• Identify, assess, and manage information security risks to ensure the protection of the organization’s data and technology assets as well as integrating these risks into Step Up's enterprise risk management program.
• Develop and enforce information security policies, standards, procedures and awareness training.
• Lead the organization’s detection, response, and recovery efforts for cybersecurity incidents.
• Ensure compliance with relevant laws, regulations, and industry standards related to information security and data protection.
• Conduct tabletop exercises tailored to the organization's risk scenarios and appetite.
• Collaborate with IT and other departments to ensure security is embedded into Step Up's system development lifecycle and operational processes.
• Continuously evaluate and improve the information security program to address emerging threats and changing organizational needs.
• Provide regular reports to senior management and the Board on information security program maturity, including risk assessments, incident response activities, and compliance efforts.
• Oversee the security aspects of third-party vendor relationships to ensure they meet the organization’s security requirements.

Qualifications:

• Demonstrated success and a proven track record in professional/life experience in specific job functions, projects, or industries. Military service can substitute for professional experience and/or formal education requirements.
• Bachelor's degree in Information Security, Computer Science, or demonstrated success and a proven track record in professional/life experience in specific job functions, projects, or industries, and military service can substitute for the formal education requirements.
• At least 10 years of experience in information security, with a minimum of 5 years in a senior leadership role.
• Deep knowledge of information security principles, frameworks, and best practices, particularly within the education, nonprofit, and/or payments sectors.

You’ll Stand Out If You Have:

• An advanced degree or professional certifications (e.g., CISSP, CISM, CISA) are preferred.

Key Competencies:

• Demonstrates critical Transformation and Leadership skills and abilities: True Collaboration;
• Focusing on Outcomes: Owning and effectively solving problems for today and the future; Empathetic Leadership; Adaptability and Resilience; Emotional Intelligence/CEM skills and Continuous Development/Continuous Improvement Mindsets.
• Demonstrates exceptional leadership skills with the ability to inspire and manage information security teams effectively.
• Possesses outstanding analytical and problem-solving abilities, enabling data-driven decision making.
• Displays superior verbal and written communication skills, capable of engaging with stakeholders at all levels.
• Proficient in using advanced information security management and monitoring tools to enhance efficiency and accuracy.
• Possesses deep knowledge of information security principles, frameworks, and best practices, particularly within the education, nonprofit, or payments sectors..

Interview Process:

• Veriff Identity Verification
• Recruiter Video Interview
• Hiring Manager Video Interview
• Senior Leadership Panel Video Interview
• Executive Leadership Panel Video Interview
• Chief Executive Officer Video Interview

Why you’ll love working here:

• Award-Winning Culture:
  We’ve been named one of the Best Companies to Work For four years in a row by Florida Trend and Workforce Research Group and honored as one of the Healthiest Companies by Florida’s First Coast Worksite Wellness Council. Fast Company recognized us as one of the Best Workplaces for Innovators—proof that we foster an environment where big ideas and bold thinking are encouraged.
• Comprehensive Benefits:
  Enjoy medical, dental, and vision coverage, plus HSA, FSA, and Lifestyle Spending Accounts. We also offer a competitive 401(k) with company match to help you plan for the future.
• Flexibility & Work-Life Harmony:
  Remote work options and unique time-off programs—including 14 paid holidays, Care and Parental Leave, and our Flexible Leave policy.
• Growth & Development:
  From mentorship programs to management training and professional development opportunities, we invest in your career journey every step of the way.
• Supportive Professional Environment:
  Our dedicated coaching team is here to help you succeed, and employee-led committees give you a voice in shaping our workplace. Collaboration isn’t just encouraged, it’s how we work.

Working Conditions and Equipment Use:

• Work is performed indoors in a typical office environment - not substantially exposed to adverse environmental conditions.
• Valid driver’s license and proof of insurance may be required, depending on role responsibilities.
• Must be able to lift up to fifteen (15) pounds.
• Frequent use of office machines to include telephone, computer, and printer.