Vice President Information Security
About the role
Lexitas is seeking a hands-on, forward-thinking Vice President of Information Security to build, scale, and modernize our enterprise security program. This is a critical leadership role at a pivotal moment for the company, as AI becomes deeply embedded in both our client-facing solutions and internal operations.
Responsibilities
Execute the enterprise information security roadmap in partnership with the CIO/CISO
Lead, mentor, and grow a high-performing security team (onshore and offshore)
Manage key security vendors (SIEM, Tenable/Nessus, MDR/MSSP) and ensure strong ROI and SLA adherence
Drive company-wide security awareness initiatives and training programs
Develop governance frameworks for internal AI tools (data classification, acceptable use, risk thresholds)
Partner with engineering and product teams to secure AI-powered services (model integrity, privacy, prompt security)
Monitor emerging AI threats (LLM vulnerabilities, adversarial ML, supply chain risks) and implement controls
Leverage AI/automation within InfoSec to improve efficiency (alert triage, reporting, RFP responses)
Identify and implement automation for high-volume, repeatable tasks
Establish visibility into workloads using project/work management tools
Oversee vulnerability management lifecycle including scanning, prioritization, and remediation tracking
Lead incident response planning, detection, monitoring, and testing
Manage penetration testing and remediation follow-through
Lead responses to client security questionnaires, RFPs, and audits
Maintain compliance across SOC 2, HIPAA, and other frameworks with continuous audit readiness
Serve as a subject matter expert in client security reviews and due diligence processes
Maintain and update security policies, standards, and procedures
Risk & Architecture: Advise leadership on risks, vulnerabilities, and emerging threats with actionable recommendations
Manage third-party/vendor risk assessments and monitoring
Embed security into SDLC, cloud architecture, and application design
Support privacy initiatives in partnership with Legal and executive leadership
Qualifications
Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
10+ years of progressive experience in information security
5+ years in leadership or program ownership roles
Proven success building or modernizing security programs in resource-constrained environments
Experience managing offshore or distributed teams
Preferred industry experience in legal services, healthcare, or regulated environments
Supervisory Responsibilities
Is responsible for the overall direction, coordination, and evaluation of IT Security staff.
Language Skills
Ability to effectively present information and respond to questions from internal and external customers whose first language is English.
Certificates, Licenses, Registrations
CISSP, CISM, CCSP, or equivalent; AI/cloud security certifications a plus.