VP of Information Security & Risk Management

We are looking for an accomplished security executive to lead the organization’s information security, risk management, and compliance efforts from an enterprise perspective. This role will shape a forward-looking security strategy that supports business goals, strengthens regulatory alignment, and promotes resilient operations across the company. Based in Nashville, Tennessee, this leader will work closely with executives, internal teams, clients, and external partners to guide decision-making, elevate governance, and oversee response readiness.

Responsibilities:
• Develop and lead a company-wide information security and risk management roadmap that supports strategic business objectives and long-term growth.
• Convert executive priorities into practical security programs, measurable initiatives, and effective control frameworks across the enterprise.
• Establish meaningful performance and risk metrics to evaluate security maturity, track progress, and inform leadership decisions.
• Direct governance, risk, and compliance activities by maintaining policies, standards, and control practices that meet regulatory and organizational expectations.
• Oversee audit preparation, regulatory reviews, and corrective action plans to ensure timely remediation and sustained compliance.
• Provide executive leadership during cybersecurity incidents by guiding escalation, communication, containment, and recovery efforts.
• Lead senior security teams responsible for monitoring threats, managing vulnerabilities, and reducing enterprise risk through coordinated operational execution.
• Represent the organization in security-related discussions with clients, vendors, and business partners, including assessments, due diligence, and contractual security matters.
• Build and develop a high-performing security leadership structure by mentoring managers and directors, setting priorities, and aligning resources to business needs.