Vice President, Cybersecurity, Risk & Compliance (Deputy CISO)

• 12+ years in cybersecurity, including 5+ years in a senior leadership role, owning strategy,architecture, risk, and a team.
• Experience operating as a deputy or right hand to a CISO or equivalent security executive,including acting with delegated authority in their absence.
• Demonstrated experience securing SaaS, cloud, and AI/LLM platforms at enterprise scale.
• Direct ownership of an enterprise technology risk management program, including risk registers, risk quantification, and executive/board-level risk reporting.
• Working knowledge of major compliance frameworks (SOC 2, ISO 27001, GDPR); experience with China-specific frameworks (MLPS/ICP) a strong plus
• Hands-on experience with modern threat defense tooling, zero-trust architecture, and identity management
• Experience owning a security engineering practice, including secure architecture guidance for a core platform and a penetration testing program through remediation.
• A track record of balancing security rigor with delivery speed in agile, DevOps, or CI/CD
• Bachelor’s degree in computer science, Information Security, or related field; CISSP, CISM, or equivalent certification preferred
• Direct experience securing generative AI or LLM-based products, including runtime defense and agentic system monitoring.
• Experience in a multinational, research, or information-services business
• Experience designing a governance model that pre-clears risk categories rather than reviewing every project individually.
• Exposure to global regulatory environments, including operating in or adjacent to the Chinese market.
• Experience with GRC platforms and leading external audit engagements through to clean opinions

Success looks like (first 12 months)

• A published library of pre-approved security patterns is in active use, measurably reducingtime-to-ship for new pilots and applications.
• SOC 2 Type II and ISO 27001 programs are on track against agreed timelines with no material findings.
• AI pilots ship through the standard lifecycle with security built in from intake, not bolted on before launch.
• Vendor risk reviews consistently meet SLA, and the team is recognized as an enabler of delivery rather than a checkpoint.
• The enterprise risk register is current and actively used to drive prioritization, with clear owners and mitigation timelines for every open risk

Why This Role Stands Out

At IDC, your work helps shape how the world understands technology and where it goes next. You collaborate with curious, high-caliber colleagues who value rigor, integrity, and shared success. As the premier global provider of trusted technology intelligence, IDC equips business and technology leaders with the evidence they need to make confident decisions. Our insights inform strategy, investment, and innovation across industries and regions.

Recognized by IIAR as Analyst Firm of the Year for five consecutive years, IDC sets the standard for credibility and impact. With more than 1,000 analysts worldwide and a truly global perspective, we combine deep expertise with practical relevance. Here, your ideas matter, your voice is heard, and your contributions provide the insights leaders rely on every day. It is meaningful work, backed by a culture that supports growth, collaboration, and long-term career development with a globally respected brand.