At Constant Contact, we are seriously awesome people who take ownership and make an impact by operating with the mindset, integrity and courage of a small business owner. There’s something so profoundly rewarding about knowing that your work is empowering people everywhere to pursue their dreams. Here, we all play an integral part in helping business owners, entrepreneurs, non-profits and individuals to succeed by giving them all the help and tools they need to grow online. We’re energized by new challenges and new possibilities-and we’re just getting started!

As a technical and hands-on Chief Information Security Officer (CISO) reporting to the CIO, you will be responsible for establishing and executing the strategic enterprise vision and proactive program to ensure all of Constant Contacts information assets, employees, customers, and technologies are adequately protected.

What You'll Do:

Strategy and Leadership:

Develop and communicate the organization's cybersecurity strategy, vision, and goals to executive management, board members, and employees
Provide leadership and guidance to the information security team, fostering a culture of accountability, transparency, and proactive continuous improvement in cybersecurity practices
Collaborate on the overall business technology plan with Engineering, Product, Legal and Revenue, providing a current knowledge and future vision of security technology and systems
Oversee a team of Security Professionals to execute on the security roadmap

Risk Management:

Identify, assess, prioritize, and manage cybersecurity risks to the organization's information assets
Develop and maintain the organization's risk management framework, policies, procedures, and standards

Security Operations:

Oversee the operation of the enterprise's security solutions, including the deployment, monitoring, and maintenance of infrastructure, intrusion detection/prevention systems, endpoint security solutions, etc.
Lead Security incident response planning and execution to mitigate potential threats and minimize impact
Develop and achieve individual and team focused Security OKRs

Compliance and Audit:

Ensure the organization's compliance with relevant regulations, laws, and standards pertaining to information security
Collaborate with internal and external auditors to conduct regular security assessments, audits and successful recertification of SOC2

Training and Awareness:

Promote security awareness and coordinate security training programs for employees at all levels of the organization.
Foster a culture of proactive cybersecurity awareness and accountability throughout the organization

Vendor and Third-Party Risk Management:

Evaluate, monitor, and manage risks associated with third-party vendors and service providers
Ensure contracts include appropriate security requirements and conduct regular assessments of vendor security practices

Budget Management:

Develop and manage the information security budget, ensuring optimal allocation of resources and investments in line with organizational priorities

Who You Are:

Proven experience (8+ years) in a senior-level information security management role
Degree in Computer Science, Information Technology, or a related field (advanced degree preferred)
Professional Security certifications such as CISSP, CISM, or CISA
Experience with certification of common information security management frameworks, such as SOC2, ISO/IEC 27001 and NIST
Strong understanding of cybersecurity technologies, risk management frameworks, and global regulatory requirements (GDPR, CCPA, etc)
Experience in a SAAS company
Experience with cloud and hybrid security principles and practices
Track record of successfully building and leading high-performing global cybersecurity teams
Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams
Experience with contract and vendor negotiations and management, including managed services

#LI_HK1 #LI-Hybrid

The specific salary offered to a candidate may be influenced by a variety of factors including the candidate’s experience, their education and work location. In addition, some roles may be eligible for additional on target commission pay or bonus. The compensation package includes health and welfare benefits including paid leave.

Pay Transparency - All Full Time Employees

$207,600—$259,500 USD

Why You’ll Love Us:

We celebrate one another’s differences. We are proud of our culture of diversity and inclusion, and we're always working hard to strengthen and improve this culture. We have programs in place that bring us together on important issues and provide educational opportunities for all employees.
Join the experts. If you're passionate about supporting businesses and organizations, you won’t find a better spot to share your talent. We’re dedicated to improving the quality of our product from a customer standpoint and have a true desire to enable the success of businesses, non-profit organizations, and community groups.
You’ll have opportunities to grow your career. We encourage and support our team members to learn different aspects of the business, take on stretch assignments, seek coaching opportunities and professional development opportunities.
A generous paid time off policy and a competitive benefits package that supports the health and well-being of you and your family

At Constant Contact, we’re all about work flexibility and are proud to serve our customers as a hybrid workforce. Our hybrid work model combines the convenience of remote work with access to our great office locations to collaborate in-person, participate in live trainings, and socialize with colleagues.

Application Deadline: 30 days. We may fill this job opening prior to the deadline if a candidate is selected by us.

Constant Contact is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, genetic information, veteran status or any other status protected under applicable law. If you require accessibility assistance applying for open positions, please contact talentacquisition@constantcontact.com.

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

Notice to Recruiters and Staffing Agencies:

Constant Contact has an internal talent acquisition department and designated career site for individuals looking to join our team. Constant Contact will not accept unsolicited resumes from any external recruiters, staffing firms, search agencies or any fee-based referrals. Any unsolicited resumes sent to directly to Constant Contact, in any capacity will be considered property of Constant Contact. Constant Contact will not pay a fee for any placement resulting from the receipt of an unsolicited resume.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone *

Location (City) *

Resume/CV *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

Cover Letter

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

LinkedIn Profile

Website

How did you hear about this job? *

If you selected Employee Referral above, please provide employee's name here.

Will you now or in the future, require sponsorship for employment visa status? *

Have you ever been employed by Constant Contact or any affiliated company? *

What are your salary expectations? *

Do you have any relatives currently working for Constant Contact or any affiliated company? *

Voluntary Self-Identification - Ethnicity *

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Constant Contact’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

California Residents Only:
Pursuant to Cal Civ Code Sec. 1798.100(b) (the California Consumer Privacy Act or CCPA), this Invitation to Self-Identify Race, Ethnicity, and Sex and as a Protected Veteran and Notice of Data Collection describes the categories of personal information we collect from you (e.g., identifiers and protected classification information) and the purposes for which we will use this personal information. [This Invitation to Self-Identify Race, Ethnicity, and Sex and as a Protected Veteran and Notice of Data Collection supplements Constant Contact's Applicant/Employee CCPA Privacy Notices.]

Voluntary Self-Identification - Gender *

Veteran Status *

Constant Contact is a federal contractor subject to the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, as amended by the Jobs for Veterans Act of 2002, 38 U.S.C. 4212 (“VEVRAA”), which requires contractors to take affirmative action to employ and advance in employment:

1. disabled veterans defined as (a) veterans of the U.S. military, ground, naval or air service who are entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or (b) persons who were discharged or released from active duty because of a service-connected disability;

2. recently separated veterans defined as any veterans during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service;

3. active duty wartime or campaign badge veterans defined as veterans who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense; and

4. Armed Forces service medal veterans defined as veterans who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

If you believe you belong to any of the categories of protected veterans listed above, please indicate by selecting the appropriate option below. As a government contractor subject to VEVRAA, we request this information to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. This information is being requested on a voluntary basis and will be kept confidential, consistent with applicable law. Refusal to provide the requested information will not subject you to any adverse treatment. If provided, this information will not be used in a manner inconsistent with VEVRAA.

Voluntary Self-Identification of Disability *

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Enter the verification code sent to to confirm you are not a robot, then submit your application.

Security Code *

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.