$220,000 - $250,000 / year

The insurance industry runs on Vertafore. We equip agencies, MGAs, and carriers with the core digital systems, specialized AI, and data-driven foundation to eliminate distribution drag across the insurance lifecycle, spanning sales, servicing, and back-office operations. 

Underpinned by unmatched speed and performance power, we are the trusted backbone that’s taking the insurance industry from friction to flow with Distribution Velocity – speed, performance, and trust - to drive growth at scale. 

With over 95% of the top agencies and insurers and 50% of industry compliance transactions running through Vertafore, we lead at the intersection of innovation and trust, giving insurance professionals the confidence to transform and win in the AI era. 

Our reach is global, with headquarters in Denver, Colorado, and offices across the U.S., Canada, and India.

The VP, Cybersecurity is responsible for developing and executing Vertafore's enterprise cybersecurity strategy and leading the organization's cybersecurity operations, architecture, engineering, and risk mitigation programs. This executive is accountable for protecting Vertafore's SaaS products, cloud infrastructure, corporate systems, and sensitive customer data through effective security controls, proactive threat detection, incident response, and continuous security improvement.

The VP provides strategic leadership across security operations, product and application security, cloud security, identity and access management, vulnerability management, and emerging technology security, including artificial intelligence. The role partners closely with Engineering, Product, Information Technology, Legal, and Compliance to integrate security into business operations and product development while supporting Vertafore's customer commitments and regulatory obligations.

As a senior leader, the VP establishes measurable cybersecurity objectives, develops high-performing global security teams, manages cybersecurity investments, and provides executive leadership with clear visibility into material security risks, operational performance, and security program maturity.

Core Duties and Responsibilities:

Enterprise Cybersecurity Strategy and Leadership

·         Develop and execute a multi-year, risk-based cybersecurity strategy and roadmap aligned with Vertafore business priorities and evolving threats.

·         Lead and develop high-performing cybersecurity teams, establish clear accountability, and support succession planning, professional development, and a strong security culture.

·         Own cybersecurity budgets, resource planning, vendor investments, program priorities, and performance metrics; report material risks and progress to executive leadership.

·         Advance zero-trust principles, including identity and access management, least privilege, network segmentation, and continuous verification.

·         Partner with Roper Technologies corporate cybersecurity to align Vertafore’s program with the Roper cyber controls framework, participate in portfolio-wide security initiatives, and provide timely reporting on control maturity, material risks, and incidents

Security Operations, Incident Response, and Resilience

·         Lead security monitoring, threat detection, investigation, containment, and remediation capabilities, including a coordinated 24/7 monitoring and response operating model.

·         Oversee security operations tooling, detection engineering, endpoint protection, threat intelligence, threat hunting, and external attack surface management.

·         Maintain and exercise cybersecurity incident response plans; coordinate response with IT, Engineering, Legal, Compliance, and external specialists, including post-incident reviews and corrective actions.

·         Partner with IT and business continuity owners on cyber recovery readiness, ransomware resilience, disaster recovery exercises, and response to major technology disruptions.

·         Define and monitor operational measures such as detection coverage, response effectiveness, remediation timeliness, and control performance.

Cloud, Product, Application and AI Security

·         Direct security architecture and engineering for cloud environments, SaaS platforms, corporate infrastructure, and data center systems where applicable.

·         Partner with Product and Engineering to integrate security into the software development lifecycle, including secure design, code and dependency security, penetration testing, and remediation of application vulnerabilities.

·         Establish security requirements and review processes for AI-enabled products, agents, models, and integrations, including access controls, prompt-injection defenses, sensitive-data protection, and monitoring of AI-specific threats.

·         Assess material security risks arising from development environments, cloud configurations, privileged access, and third-party technology integrations.

Technical Risk and Third-party Security

·         Oversee technical risk assessments, threat modeling, vulnerability identification, prioritization, and remediation across the enterprise and product environments.

·         Establish and validate security controls and technical standards consistent with applicable frameworks and business requirements

·         Partner with Compliance on vendor security assessments by defining technical security requirements, evaluating material vendor risks, and tracking technical remediation.

·         Partner with Legal and Compliance to support security governance, contractual commitments, audits, and regulatory obligations while retaining ownership of technical security controls and corrective actions.

Customer Security and Cross-Functional Partnership

·         Provide executive-level technical support for significant customer security inquiries, escalations, and security-related commitments.

·         Partner with Compliance and Assurance on customer assessments and audit evidence, ensuring technical accuracy and timely resolution of security issues; support rather than duplicate operational questionnaire and audit coordination.

·         Build productive relationships with business and technology leaders and communicate cybersecurity priorities, tradeoffs, and risk decisions clearly.

·         Lead cybersecurity projects and transformation initiatives to deliver defined security outcomes within approved scope, timelines, and budgets.

Knowledge, Skills and Abilities:

·         Expertise in enterprise cybersecurity strategy, security operations, incident response, zero-trust architecture, cloud security, and product/application security.

·         Strong knowledge of SaaS environments, secure software development, IAM, vulnerability management, and security engineering.

·         Understanding of AI security threats and controls, third-party security risk, NIST frameworks, ISO 27001, MITRE ATT&CK, and relevant security assurance requirements such as SOC 2..

·         Demonstrated ability to lead globally distributed teams, influence senior stakeholders, manage budgets, and translate technical risk into business decisions.

·         Excellent communication, executive reporting, prioritization, collaboration, and crisis leadership skills.

Qualifications:

·         Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience; advanced degree preferred.

·         15+ years of progressive cybersecurity experience.

·         10+ years of cybersecurity leadership experience.

·         CISSP, GIAC, CISM, or equivalent cybersecurity certification preferred.

Additional Requirements and Details:

·         Travel required up to 10% of the time.

·         Ability to work remotely with a stable internet connection as needed.

·         Ability to work from an office location when required.

·         Occasional lifting and/or moving up to 10 pounds.

·         Frequent repetitive hand and arm movements required to operate a computer.

·         Close vision required for computer work.

·         Frequent sitting and/or standing.

Is this role not an exact fit for you? Keep an eye on our Careers Page for other positions!

Vertafore is a drug free workplace and conducts preemployment drug and background screenings.

The selected candidate must be legally authorized to work in the United States.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be an exhaustive list of all the job responsibilities, duties, skill, or working conditions. In addition, this document does not create an employment contract, implied or otherwise, other than an "at will" relationship. 

Vertafore strongly supports equal employment opportunity for all applicants regardless of race, color, religion, sex, gender identity, pregnancy, national origin, ancestry, citizenship, age, marital status, physical disability, mental disability, medical condition, sexual orientation, genetic information, or any other characteristic protected by state or federal law.

We do not accept resumes from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.