← All roles
CISO

VP, Security and CISO

Trace3 · Software · 1,001-5,000 employees

Irvine, CA · Hybrid · full_time

CLI Career Level

CISO

Moderate confidence

Opportunity Score

64/100

Solid

High confidence

Executive Fit

Sign in

Add your background to score this role against you

Career Level and Opportunity Score describe the role itself. Executive Fit is the only figure that depends on your profile.

First seen Oct 27, 2026 · Last verified 22 hours ago · Sourced from LinkedIn — VP / Head of Security (US)

CLI Take

Scope matches the title

CLI reads this as a CISO mandate, consistent with how the employer has titled it. CLI's analysis of the posting describes a strategic build or transformation mandate, and it reports to VP, Information Technology & Application Development and carries SOC 2 accountability. Scope language covers executive committee exposure. Team size is not disclosed and remains the main open question before pursuing it.

Why this role scores the way it does

64/100 — solid opportunity quality. CLI reads this as a CISO mandate. Strongest signal: CLI's analysis of the posting describes a strategic build or transformation mandate. Main drag on the score: Scope language covers executive committee exposure. 2 of 10 dimensions are not disclosed, which lowers confidence rather than the score.

Career level read

CISO — The employer lists this as “VP, Security and CISO”. CLI reads it as CISO because the role shows reports to a VP, 1,001-5,000 employee organization, executive committee exposure.

Moderate confidence

What makes it attractive

  • CLI's analysis of the posting describes a strategic build or transformation mandate.
  • The role carries more scope than the employer's title suggests.
  • Employer profile: 1,001-5,000 employee organization, pe backed ownership, private equity, revenue 1b 10b.
  • Signals worth probing: The role carries direct P&L responsibility (revenue and gross profit) alongside traditional CISO duties, which may create a conflict between internal security requirements and commercial sales targets..

What to probe before applying

  • Scope language covers executive committee exposure.
  • The reporting line sits below the executive team — the role reports to a VP.

Scoring components · Solid

Compensation versus comparable roles55 · weight 15%

The employer discloses a base range, but there is no comparable set to benchmark it against yet.

Reporting level29 · weight 12%

The reporting line sits below the executive team — the role reports to a VP.

Functional and geographic scope21 · weight 12%

Scope language covers executive committee exposure.

Quality of the mandate100 · weight 12%

CLI's analysis of the posting describes a strategic build or transformation mandate.

Executive and board exposure65 · weight 10%

The posting references executive or committee-level interaction.

Role authority versus title100 · weight 10%

The role carries more scope than the employer's title suggests.

Company scale and trajectory83 · weight 10%

Employer profile: 1,001-5,000 employee organization, pe backed ownership, private equity, revenue 1b 10b.

Team ownershipNot disclosed · excluded from the score

Team size: not disclosed.

Budget ownershipNot disclosed · excluded from the score

Budget ownership: not disclosed.

Risk signals75 · weight 5%

Signals worth probing: The role carries direct P&L responsibility (revenue and gross profit) alongside traditional CISO duties, which may create a conflict between internal security requirements and commercial sales targets..

Dimensions the employer does not disclose are excluded and the remaining weights are rebalanced, so missing information lowers confidence rather than the score.

Sign in to see how this role scores against your background, and add your career goal to evaluate career value.

Compensation

$250,000 – $350,000 base salary, disclosed by employer

Sample size not yet sufficient for a market comparison

Owns the internal security budget, including tools, managed services, and assessment providers.

See the full benchmark bands by level and region

The mandate

This dual-purpose executive role serves as both the internal CISO and the business leader for the Security Solutions Group. The leader is charged with securing the enterprise while simultaneously driving the go-to-market strategy, partner ecosystem, and financial performance (revenue and gross profit) for Trace3's commercial security offerings.

Dual remit covering internal enterprise security (CISO) and the Security Domain go-to-market strategy (VP). Leads Practice Directors, Domain Architects, Security Operations, and Compliance teams while partnering with the VP of IT & App Dev.

Scope

  • Reports to VP, Information Technology & Application Development

Domains and regulation

  • Enterprise Security
  • Cyber Defense
  • GRC
  • Incident Response
  • Compliance
  • Third-Party Risk
  • SOC 2

Requirements

Must have

  • 10+ years of services-led IT and cybersecurity solution sales experience (hardware, software, and services).
  • Experience leading an enterprise security program as a CISO, Deputy CISO, or comparable leader.
  • Experience owning SOC 2 or similar audits and customer security assurance activities.
  • Bachelor's degree required.
  • Experience within technology or consulting organizations, including strategic business planning.
  • Experience delivering accurate sales forecasts and managing domain-level financial performance.

Preferred / bonus

  • Nothing listed as optional.

Only must-have items are scored as hard constraints in Executive Fit.

Likely challenges

Signals worth probing

Not stated in the posting: Specific team size (headcount) for Security Operations and Compliance teams not disclosed.; Explicit reporting line to the CEO or Board not stated; mentions reporting to executive leadership..

About Trace3

Trace3 is a technology solutions provider that delivers IT infrastructure, cloud, and cybersecurity consulting services. The company provides strategic advisory and managed services to mid-market and enterprise clients, focusing on emerging technologies and digital transformation. For a security leader, the organization offers a scale of over $1 billion in annual revenue and a broad national footprint of technical engineering talent.

Industry
Software
Headcount
1,001-5,000 employees
Headquarters
Irvine, CA
Founded
2002
Ownership
Private equity backed
Funding
Private equity backed
Revenue
$1B – $10B
Investors
H.I.G. Capital, American Securities

Full company profile for Trace3 →

View original job description
Who is Trace3?Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.  Ready to discover the possibilities that live in technology? Come Join Us!Street-Smart - Thriving in Dynamic TimesWe are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.Juice - The “Stuff” it takes to be a Needle Mover We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.Teamwork - Humble, Hungry and SmartWe are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.  JOB SUMMARY:The VP, Security and Chief Information Security Officer (CISO) has two interconnected responsibilities. As the Security Domain VP within the Trace3 Solutions Group, this role owns the Security domain go-to-market strategy, partner ecosystem, and gross profit performance across all regions. As Trace3's CISO, this role is responsible for the security of Trace3 and the execution of its internal security program at the same standard recommended to clients.On the go-to-market side, this role leads Security Practice Directors and Domain Architects, shapes Security offerings, supports client engagement activities including assessments, requirements gathering, proofs of concept, and technical workshops, and ensures effective handoff to Delivery. The role is accountable for Security domain revenue, gross profit, year-over-year growth, and the development of AI-enabled security services that address both emerging threats and defense strategies.As CISO, this role leads Trace3's Security Operations and Security Compliance functions. Trace3 operates on the same security principles it delivers to clients, with the CISO serving as the first adopter and validator of Security domain offerings before they are brought to market. This role partners closely with the VP, Information Technology & Application Development and owns Trace3's security posture, risk management, compliance, audit outcomes, and customer assurance activities. SUMMARY OF ESSENTIAL JOB FUNCTIONS:Security Domain Leadership (Go-to-Market)Define and evolve the Security domain's go-to-market strategy for security products, services, and solutions across all regions.Establish strategic and financial goals, develop execution plans, and measure results against objectives.Own Security domain revenue, gross profit, and year-over-year growth through business planning, pipeline management, sales execution, and performance oversight.Develop AI security offerings that improve client outcomes and support modern security, governance, and risk initiatives.Lead Practice Directors and Domain Architects and oversee presales activities from initial engagement through scope definition.Drive growth of strategic, complex, multi-year client engagements.Ensure client satisfaction throughout the engagement lifecycle while delivering the Trace3 Total Customer Experience.Build and maintain executive relationships with client security and technology leaders, including CISOs.Partner with Client Architects, Regional Domain Architects, account teams, and Digital Consulting to deliver Security domain solutions and ensure successful transition to Delivery.Own Security partner strategy and collaborate with Technical Alliances on partner selection, tier status, and joint pipeline development.Partner with Portfolio Management to maintain and evolve Security domain plays within the Solutions Group catalog.Trace3 Chief Information Security OfficerOwn Trace3's enterprise security strategy, roadmap, and program.Lead Security Operations and Security Compliance teams, defining organizational requirements and building a high-performing team.Own governance, risk, and compliance programs, including SOC 2 and other audit initiatives.Oversee security operations, including threat detection and response, vulnerability management, penetration testing, and incident response.Lead key security initiatives including the GRC platform, Trust Center rollout, and MDR provider transition through completion.Own customer assurance activities, including the Trust Center, security questionnaires, and security-related client requests.Establish structured intake, tracking, reporting, and service-level management for security and compliance requests.Validate Security domain offerings and partner technologies internally before taking them to market and leverage those experiences to create client-facing points of view.Partner with the Accelerators team to ensure internal and client-facing environments are secure and aligned to the same standards.Partner with the VP, Information Technology & Application Development to secure infrastructure, applications, and internal AI tools and establish AI governance practices.Manage the internal security budget, including tools, managed services, and assessment providers.Report security posture, risk, and program performance to executive leadership and key stakeholders.Leadership Across Both ResponsibilitiesLead, coach, and mentor team members across both the Security domain and internal security organization.Advise the Executive Leadership Team on security strategy, investment priorities, risk management, and long-term planning. REQUIRED SKILLS AND EXPERIENCE:10+ years of services-led IT and cybersecurity solution sales experience, including hardware, software, and services.Experience leading an enterprise security program as a CISO, Deputy CISO, or comparable security leader.Experience managing security operations, governance, risk, compliance, incident response, and audit programs.Experience owning SOC 2 or similar audits and customer security assurance activities.Bachelor's degree required; CISSP, CISM, or similar security certifications preferred.Experience within technology or consulting organizations, including strategic business planning.Proven leadership, coaching, and team development experience.Strong understanding of enterprise technology environments and business challenges.Strong understanding of how organizations leverage technology to achieve business objectives.Knowledge of AI trends, AI-enabled security services, AI governance, and risks associated with enterprise AI adoption.Strong financial and business acumen.Experience delivering accurate sales forecasts and managing domain-level financial performance, including revenue, gross profit, forecasting, and operating plans.Excellent organizational, time management, and prioritization skills.Consultative approach to working with clients and sales teams.Ability to manage competing priorities in a fast-paced, evolving environment.Excellent written, verbal, and presentation skills with the ability to communicate effectively to both technical and executive audiences.Willingness to travel as required. Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.Estimated Pay Range: $250,000 USD - $350,000 USD The PerksComprehensive medical, dental and vision plans for you and your dependents401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term DisabilityCompetitive CompensationTraining and development programsMajor offices stocked with snacks and beveragesCollaborative and cool cultureWork-life balance and generous paid time off Our CommitmentAt the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.If you require a reasonable accommodation to complete the application process or participate in an interview, please email recruiting@trace3.com. ***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

Cyber Leadership Index is not the employer and does not represent candidates for these roles. Verify all details with the employer before acting.