Civeo is seeking a strategic and experienced senior IT security leader to serve as our next Chief Information Security Officer. This opportunity follows the planned retirement of our CISO after 12 years of impactful service and reflects our commitment to thoughtful succession planning and continued maturity of our cybersecurity program. The incoming leader will benefit from a structured transition, partnering with the incumbent for three to six months to ensure continuity, knowledge transfer, and a strong foundation for future success.

Responsibilities

Own and lead enterprise-wide cybersecurity strategy, governance, and program execution.
Setting the strategic cybersecurity direction for the company.
Establishing, sustaining, and monitoring compliance with company cybersecurity policy and procedures.
Ensuring the quality and effectiveness of cybersecurity safeguards, including conduct of internal and independent assessments that evaluate the cybersecurity capabilities of the company.
Accountable for enterprise cyber risk management, including defining risk appetite, maintaining risk registers, and establishing governance structures that support informed decision-making and accountability.
Assessing day-to-day incidents to determine actual or potential business impact and mobilizing incident response resources as appropriate.
Monitoring the security postures of company IT and business supply chains.
Performing quantitative and qualitative cybersecurity risk analysis.
Vetting IT vendors and embedding security requirements into new applications, technologies, and business initiatives.
Overseeing security architecture across cloud, on-premises, and hybrid environments.
Understanding and developing security designs for IT and, where applicable, OT/ICS environments.
Leveraging value from external relationships with cybersecurity experts.
Providing board-level reporting on cybersecurity posture, material risks, risk trends, and program maturity metrics.
Drafting presentations for review by executive management and delivering them to the board of directors and/or audit committee.
Ensuring independent escalation of cybersecurity risks when necessary.
Driving a culture of security awareness and shared accountability across the organization.

Qualifications

Must reside around the Houston metro area due to regular on-site attendance requirement; relocation assistance is not provided.
CISSP (Certified Information Systems Security Professional) - is preferred
CISM (Certified Information Security Manager) or CISA (Certified Information Systems Auditor) - preferred
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field required
Master's degree in Cybersecurity, Information Assurance, Business Administration, or related discipline preferred
Proficiency with SIEM platforms (e.g., Sentinel) and SOAR tools for automated incident response
Proficiency with cloud security platforms (e.g. Azure Defender)
Proficiency with endpoint protection and EDR solutions (e.g., Defender, CrowdStrike, SentinelOne, Carbon Black)
Knowledge of secure software development practices
Familiarity with legal implications of cybersecurity, including breach-notification laws, data residency, and contractual risk
Experience conducting third-party risk assessments, including vendor due diligence and contract negotiation for security SLAs
Awareness of emerging technologies, including AI as a business and cybersecurity risk issue, cloud-native security, and zero-trust architectures
Experience with OT/ICS environments, IoT security, or other specialized environments, where relevant to the industry
Extensive expertise in cybersecurity domains, including network security, cloud infrastructure protection, application security, and data privacy. Candidate should demonstrate experience leading the design and implementation of layered security architectures across hybrid environments, with measurable outcomes in threat reduction.
Thorough understanding of regulatory and compliance mandates, including SOX and PCI-DSS, with a proven ability to ensure enterprise-wide adherence. Candidate should be capable of interpreting complex compliance requirements and translating them into technical and procedural safeguards across business units.
Proficient in leading security programs aligned with industry frameworks, such as NIST Cybersecurity
Framework (CSF), ISO/IEC 27001/27002, and CIS Controls. Must be able to operationalize these frameworks into actionable policies and controls, and lead audits or assessments to validate compliance and maturity.
Demonstrated experience in managing end-to-end incident response, leveraging threat intelligence and vulnerability management to proactively mitigate risks. Requires the ability to build and lead a responsive security operations function, including playbook development, forensic analysis, and post-incident reviews.
Strategic mindset with the ability to align cybersecurity initiatives with business objectives, enabling secure growth and innovation. Must demonstrate success in influencing executive stakeholders and integrating security into digital transformation, product development, and strategic planning.
Robust risk management and governance capabilities, including the development of enterprise risk registers and board-level reporting. Expected to lead risk assessments, define risk appetite, and implement governance structures that support informed decision-making and accountability.
Strong background in financial stewardship, including security budgeting, vendor negotiations, and building scalable security programs. Must have experience managing budgets, optimizing spend, and evaluating third party solutions for cost-effectiveness and strategic fit.
Proven leadership in cross-functional collaboration, driving security culture across IT, legal, HR, and executive teams. Able to foster alignment and shared ownership of security goals across diverse teams, resolving conflicts and driving consensus.
Exceptional communication skills, with the ability to distill complex technical risks into actionable insights for senior leadership and board members. Experience preparing executive briefings, risk dashboards, and board presentations that influence strategic decisions.
Experienced in crisis management and executive-level incident reporting, ensuring transparency and rapid decision-making during high-impact events. Able to lead under pressure, coordinate multi-stakeholder responses, and maintain trust through clear, timely communication.
Skilled in designing and deploying enterprise-wide security awareness and training programs, fostering a proactive security-first culture. Track record of improving employee engagement and reducing human risk through targeted education, simulations, and behavioral analytics.
Shows commitment to continuous learning through participation in industry conferences, executive leadership programs, or specialized training in emerging technologies such as AI security, zero trust, and cloud-native security.
Demonstrated success in building and leading enterprise security programs, managing teams, and influencing strategic decisions.
Minimum of 8+ years of progressive experience in information security, with at least 5 years in senior leadership roles (e.g., Sr. Manager, Director, CISO, or equivalent).

What we offer:

Flexible Hybrid Work Schedule
Comprehensive benefits package, which includes dental, vision, life insurance, and extended health coverage
Health or Personal Spending Account
Employee & Family Assistance Program (EFAP)
RRSP/DPSP Match Program
Professional Development
Convenient On-site Parking

We are dedicated to employment equity and continuously strive to enhance our diversity and inclusion practices, fostering a respectful and collaborative workforce. We seek applicants with diverse skills, experiences, and competencies to make a meaningful impact on the lives of those living and working away from home.

If you want to join a forward-thinking and innovative company that values and rewards teamwork, hard work, and quality, please apply! We thank all applicants for their interest, but only those selected for the next stage will be contacted.

To apply, please submit your resume online to https://civeo.com/people-careers/job-opportunities/

Civeo

Latest Jobs

Chief Information Security Officer