Software Engineer
Senior director leading enterprise-wide information security strategy, overseeing risk management, governance, compliance, and cloud security initiatives to protect critical network infrastructure and data across mobile, service provider, and data center environments.
Summary:
Duties & Responsibilities:
Senior Director, IT Security
Job Summary
VIAVI is seeking a visionary and execution-oriented Chief Information Security Officer (CISO) to lead and transform the company’s global information security program. Reporting directly to the CIO and serving as a key advisor to the cybersecurity steering committee, the CISO will own VIAVI’s enterprise security strategy, architecture, operations, and culture. The ideal candidate brings deep technical expertise, a track record of building mature security programs in complex global environments, and the executive presence to drive security-first thinking across engineering, cloud, product, and go-to-market functions.
Key Responsibilities
Strategic Leadership
Define and execute the company’s global information and cybersecurity strategy aligned with business objectives, risk appetite, and growth plans.
Serve as the primary cybersecurity advisor to the CIO, executive leadership team, and Board of Directors on cyber resilience, threat landscape, and program maturity.
Partner with the CTO, CIO, CFO, General Counsel, and other senior leaders to align security investments with enterprise strategy, product direction, and operational priorities.
Embed security into VIAVI’s products and AI initiatives, extending secure-by-design principles to hardware, firmware, and software offerings.
Champion a security-first culture across VIAVI’s global workforce through training, clear policies, and executive engagement.
Security Governance, Risk and Compliance
Lead enterprise-wide security governance, policy development, standards, and oversight mechanisms.
Own and maintain the enterprise cyber risk register, including identification, prioritization, treatment, and reporting of material information security risks.
Establish and maintain security programs aligned to leading frameworks and regulatory requirements, including ISO 27001, CMMC/DFARS, FedRAMP, EU CRA, UK CEP, and other applicable standards.
Develop metrics and reporting to assess security program effectiveness, risk reduction, compliance status, and operational maturity.
Establish and lead a comprehensive third-party cybersecurity risk management program to assess, monitor, and mitigate risks associated with vendors, cloud providers, SaaS platforms, outsourced service providers, and strategic technology partners.
Security Operations, Incident Management & Business Continuity
Lead security operations across monitoring, detection, triage, escalation, containment, and remediation activities.
Oversee and optimize the company’s use of SIEM, DLP, endpoint security, vulnerability management, attack surface management, zero trust, SSE and related technologies
Ensure strong cloud security architect
Posted June 18, 2026