C

Center for Internet Security

Promotes cybersecurity best practices and benchmarks

Vice President of Multi-State Information Sharing and Analysis Center Member Engagement

Full-Time
$191.1k - $344k
Expert
Bachelor's, Associate's
Remote in USA
Remote
Customer Experience & SupportCustomer Success
No H1B Sponsorship
US Citizenship Required

About the job

Requirements
  • A bachelor's degree in business, public administration, cybersecurity, or a related discipline is required; additional years of relevant experience or an associate's degree or equivalent combined with relevant experience may be substituted.
  • At least 10 years of progressive professional experience, including at least 7 years in senior leadership roles.
  • Senior leadership experience in member engagement, customer success, customer experience, account or relationship management, public-sector engagement, service delivery, or a related member-facing function.
  • Experience leading teams responsible for complex member, customer, stakeholder, or account relationships.
  • Experience developing and implementing engagement, customer success, member experience, retention, service adoption, or relationship-management strategies.
  • Ability to translate member priorities and operational concerns into actionable recommendations, engagement strategies, and service improvement opportunities.
  • Ability to facilitate high-level discussions, challenge assumptions constructively, and influence outcomes.
  • Ability to navigate ambiguity and operate effectively amid evolving strategy, structure, and requirements.
  • Experience working with state, local, tribal, or territorial government organizations, or demonstrated ability to operate successfully in complex public-sector environments.
  • Ability to build trusted relationships with senior public-sector leaders, member executives, customers, and other key stakeholders.
  • Verbal, written, facilitation, and presentation skills suitable for executive and public-facing engagements.
  • Ability to collaborate across organizational boundaries and lead through both authority and influence.
  • Commitment to advancing cybersecurity resilience across the public sector.
  • Professional judgment, discretion, and integrity.
  • Enthusiasm for the CIS mission of securing the connected world.
  • Must be a citizen of the United States.
Responsibilities
  • Provide leadership and oversight for MS-ISAC member services and support, training and education, regional engagement, and state and territory strategic engagement.
  • Lead member engagement strategies that improve service awareness, member satisfaction, effective use of services, and sustained participation.
  • Lead the design and continuous improvement of the member experience across onboarding, engagement, support, service adoption, renewal support, and ongoing value realization.
  • Develop strategies and operating practices that help members understand the value of membership and access and use available services, resources, expertise, and community.
  • Serve as a senior relationship lead with member executives and SLTT leaders, including CIOs, CISOs, Homeland Security Advisors, Emergency Managers, and other senior public-sector stakeholders.
  • Conduct executive-level engagements with state and territory leaders to understand priorities, identify concerns, communicate MS-ISAC value, and support alignment with whole-of-state objectives.
  • Oversee member support functions to ensure timely, coordinated, and professional responses to member needs, questions, escalations, and service-related issues.
  • Oversee training and education efforts to help members understand available capabilities, increase cybersecurity knowledge and awareness, and apply MS-ISAC resources to improve cybersecurity resilience.
  • Lead regional engagement efforts that strengthen relationships with local governments, regional partners, associations, and other SLTT stakeholders.
  • Establish scalable engagement approaches for strategic members and accounts, including engagement plans, relationship cadences, value reviews, executive touchpoints, and coordination of internal CIS resources.
  • Ensure member feedback, priorities, concerns, and service needs are captured and communicated to appropriate CIS teams to inform service improvement, training, reporting, and value messaging.
  • Partner with Sales and Business Services, Operations, Intelligence, and Services, Product, Marketing, Legal, Finance, and other CIS teams to coordinate member-facing activities and resolve member-impacting issues.
  • Develop and maintain scalable engagement playbooks, templates, reporting mechanisms, and operating practices to support consistent engagement across member segments.
  • Track and report member engagement metrics, including service awareness, training participation, support trends, sentiments, engagement activity, and strategic risks or opportunities.
  • Lead, coach, and develop assigned staff and managers, ensuring clear expectations, accountability, collaboration, and alignment with MS-ISAC and CIS priorities.
  • Represent MS-ISAC in member meetings, executive forums, regional engagements, association events, conferences, and other external engagements as appropriate.
  • Perform other assigned tasks and responsibilities.
Desired Qualifications
  • An advanced degree in business, public administration, cybersecurity, or a related discipline.
  • Significant experience leading member engagement, customer success, customer experience, account management, support services, training and education, or similar member-facing functions in a complex organization.
  • Experience supporting or operating within a membership-based organization, association, nonprofit, public-sector organization, technology company, cybersecurity organization, or professional services environment.
  • Experience supporting retention and renewal activities in partnership with dedicated Sales or Commercial teams.
  • Experience working with the Multi-State Information Sharing and Analysis Center (MS-ISAC), an ISAC, or a comparable public-sector information-sharing organization.
  • Familiarity with state and local cybersecurity maturity models, frameworks, and best practices.
  • Background in executive advisory, consulting, or peer-to-peer engagement models.
  • Experience supporting or operating within public-sector, nonprofit, or membership-based organizations.

About the company

C

Center for Internet Security

View
Website

The Center for Internet Security (CIS) is a nonprofit organization that helps make the online world safer. It does this by creating widely used security guides, including CIS Controls (a set of prioritized actions to improve cybersecurity) and CIS Benchmarks (step-by-step configuration standards for IT systems). These standards are developed through a global, community-driven process and are used by private businesses, public organizations, and government entities. CIS also offers services and partnerships, a membership model, and a collaborative platform called CIS WorkBench where cybersecurity professionals network and share best practices. Unlike many for-profit vendors, CIS focuses on open, consensus-based standards and community collaboration rather than selling proprietary software alone. Its goal is to build confidence in the connected world by reducing cyber threats and helping organizations implement effective security measures.

Company Size

501-1,000

Company Stage

Early VC

Total Funding

$1.7M

Headquarters

Town of East Greenbush, New York

Founded

2000

Get referred to Center for Internet Security

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • September 3, 2026 OpenAI pilot expands CIS into AI defense for SLTT governments.
  • April 15, 2026 AWS Marketplace launch sells hardened AI and HPC images.
  • September 21, 2026 CDM v3.0 quantifies IG1 coverage across five attack classes.

What critics are saying

  • September 30, 2025 ended CISA support; MS-ISAC now depends on paid memberships.
  • State and local agencies face free CISA tools, shrinking willingness to pay CIS.
  • If SLTT churn rises in 2026, CIS loses its core mission and revenue engine.

What makes Center for Internet Security unique

  • CIS Controls and Benchmarks remain the default hardening language for enterprises and governments.
  • MS-ISAC gives CIS unmatched state and local government distribution and telemetry.
  • CIS Hardened Images and CDM v3.0 turn standards into deployable defenses.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Unlimited Paid Time Off
  • Flexible Work Hours
  • Remote Work Options
  • Paid Vacation
  • Paid Holidays
  • 401(k) Retirement Plan
  • 401(k) Company Match
  • Stock Options
  • Company Equity

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

3%
Center for Internet Security
Sep 21st, 2026
CIS launches updated Community Defense Model.

CIS launches updated Community Defense Model. New analysis identifies the safeguards that provide the greatest security value against today's most prevalent attacks CLIFTON PARK, N.Y., Sept. 21, 2026 - The Center for Internet Security, Inc. (CIS(R) today announced the release of the CIS Community Defense Model (CDM) v3.0, the latest version of its data-driven framework that helps enterprises prioritize cybersecurity actions based on real-world threats. Built on attack data, threat intelligence, and MITRE ATT&CK(R) mappings, CDM v3.0 helps enterprises identify which CIS Critical Security Controls(R)(CIS Controls(R) Safeguards provide the greatest defensive value against the attacks they are most likely to face. The CIS Community Defense Model is grounded in the principle of collective defense, recognizing that enterprises often face similar cyber threats and can benefit from shared defensive knowledge. By connecting real-world attacker behavior directly to the CIS Controls, CDM v3.0 provides practical, data-driven guidance that helps enterprises reduce risk, strengthen cyber resilience, and maximize the impact of their cybersecurity investments. "Enterprises continue to face difficult decisions about where to focus limited cybersecurity resources," said Curt Dukes, Executive Vice President and General Manager of Security Best Practices at CIS. "CDM v3.0 helps defenders cut through the noise by identifying the actions that will have the greatest security value against today's most prevalent threats." Among its key findings, CDM v3.0 reinforces the value of Implementation Group 1 (IG1) of the CIS Controls, also known as essential cyber hygiene. The analysis found that enterprises implementing IG1 can achieve coverage against: * 89% of System Intrusion techniques * 86% of Social Engineering techniques * 88% of Basic Web Application Attack techniques * 84% of Privilege Misuse techniques * 88% of Denial of Service (DoS) techniques These findings demonstrate that a relatively small set of prioritized cybersecurity actions can provide broad protection against today's most common attack types and reinforce CIS guidance that every enterprise should start with essential cyber hygiene. The analysis also found that enterprises implementing all CIS Controls Safeguards can defend against 99% to 100% of techniques used across the five attack categories studied, further validating the CIS Controls as an effective foundation for modern cyber defense. New in this release, the CIS Controls Active Defense Lifecycle(TM) provides a defender-focused capability that reinforces the value of layered defense and understanding where safeguards can disrupt attacker activity before impact occurs. By aligning safeguards to stages of attacker behavior, enterprises can identify defensive strengths, uncover potential gaps, and strengthen defense-in-depth strategies. CDM v3.0 also identified CIS Safeguard 4.1: Establish and Maintain a Secure Configuration Process as the most effective individual safeguard across all five attack categories, reinforcing the critical role of secure configuration as a foundation for cyber defense. The report further concludes that while artificial intelligence is increasing the speed, scale, and accessibility of cyber attacks, foundational cybersecurity practices continue to provide effective protection against many AI-enabled attack paths. Ultimately, CDM v3.0 helps enterprises answer one of cybersecurity's most pressing questions: What should Center for Internet Security, Inc. do first? By identifying the CIS Safeguards that provide the greatest security value against real-world threats, the model transforms threat intelligence into prioritized, actionable defense strategies. The CIS Community Defense Model (CDM) v3.0 is available now at www.cisecurity.org. About CIS: The Center for Internet Security, Inc. (CIS(R) makes the connected world a safer place for people, businesses, and governments through its core competencies of collaboration and innovation. Center for Internet Security, Inc. is a community-driven nonprofit, responsible for the CIS Critical Security Controls(R) and CIS Benchmarks(R), globally recognized best practices for securing IT systems and data. Center for Internet Security, Inc. lead a global community of IT professionals to continuously evolve these standards and provide products and services to proactively safeguard against emerging threats. Its CIS Hardened Images(R) provide secure, on-demand, scalable computing environments in the cloud. CIS is home to the Multi-State Information Sharing and Analysis Center(R)(MS-ISAC(R), the trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities, and the Elections Infrastructure Information Sharing and Analysis Center(R)(EI-ISAC(R), which supports the rapidly changing cybersecurity needs of U.S. election offices. To learn more, visit or follow Center for Internet Security, Inc. on X: @CISecurity.

Associated Press
Sep 4th, 2026
CIS and OpenAI launch AI cyber defence pilot for US state and local governments

The Center for Internet Security, in collaboration with OpenAI, has launched an AI Cyber Defense Pilot to help US state, local, tribal, and territorial governments strengthen cybersecurity. The initiative will bring together government and critical infrastructure organisations to examine how AI can address real-world cybersecurity challenges. The pilot programme will evaluate AI's potential to help organisations detect risks faster, prioritise security actions, and improve cyber readiness. Participating organisations will leverage OpenAI's technology to identify and validate findings, support remediation efforts, and advance cybersecurity best practices. The initiative aims to produce implementation guidance and recommendations to inform future adoption of AI-powered cybersecurity capabilities across the public sector. CIS and OpenAI seek to identify practical approaches that can help defenders reduce risk and better protect essential services.

Today in New York
Sep 4th, 2026
Center for Internet Security launches AI Cyber Defense Pilot to strengthen state and local government cybersecurity.

Center for Internet Security launches AI Cyber Defense Pilot to strengthen state and local government cybersecurity. CIS and MS-ISAC collaboration with OpenAI will explore how AI can strengthen the cyber defense, resilience, and threat response of U.S. critical infrastructure At a time when defenders at the state and local government level are challenged by a growing threat landscape, AI has the potential to be a game changer." - Brian Calkin, Chief Technology and Innovation Officer at CIS CLIFTON PARK, NY, UNITED STATES, September 4, 2026 /EINPresswire.com/ - The Center for Internet Security, Inc. (CIS), in collaboration with OpenAI, today announced an AI Cyber Defense Pilot designed to help U.S. State, Local, Tribal, and Territorial (SLTT) governments and critical infrastructure organizations harness the power of artificial intelligence to enhance cybersecurity and resilience. As cyber threats become more sophisticated and widespread, foreign adversaries continue to target the nation's critical infrastructure. At the same time, many public sector organizations and critical infrastructure operators must defend increasingly complex environments with limited resources. The initiative will bring together government and critical infrastructure organizations, including members of the MS-ISAC community, of varying sizes, regions, and cybersecurity maturity levels to examine how AI can be applied to real-world cybersecurity challenges. The pilot program will evaluate AI's potential to help organizations detect risks faster, better prioritize security actions, strengthen cyber hygiene, and improve overall cyber readiness. "The services Americans rely on every day are increasingly in the crosshairs of cyber threats. At a time when defenders at the state and local government level are challenged by a growing threat landscape, AI has the potential to be a game changer," said Brian Calkin, Chief Technology and Innovation Officer at CIS. "This pilot will help us understand how AI can help organizations make smarter decisions, respond faster, and focus on the risks that matter most. The lessons we learn can help strengthen cyber resilience for communities across the country." The effort will be informed by the operational experience and cybersecurity expertise of the MS-ISAC community, which works daily to help SLTT governments prevent, detect, respond to, and recover from cyber incidents. That perspective will help ensure the pilot focuses on real-world challenges facing public sector defenders. Participating state and local organizations will leverage OpenAI's technology to help identify, validate, and prioritize findings, support remediation efforts, and advance cybersecurity best practices aligned with the CIS Critical Security Controls(R) and essential cyber hygiene criteria. "We have a defender's window: a narrowing opportunity to use frontier AI to close security gaps before attackers seize them. Our partnership with CIS and the MS-ISAC is about making sure that opportunity reaches the defenders protecting essential services - including smaller and under-resourced teams - with the tools, training, and support to use AI for stronger defenses," said Sasha Baker, Head of National Security Policy at OpenAI. "What we learn from this pilot can help extend those capabilities to communities across the country, so that Americans everywhere are better protected from emerging cyber threats." In addition to supporting pilot participants, the initiative will produce implementation guidance, lessons learned, and recommendations to inform future adoption of AI-powered cybersecurity capabilities across the public sector and critical infrastructure community. Together, CIS and OpenAI aim to identify practical, scalable approaches that can help defenders reduce risk, improve resilience, and better protect the essential services Americans rely on every day. The pilot reflects CIS's broader commitment to helping SLTT government organizations navigate the opportunities and challenges presented by artificial intelligence. As AI becomes increasingly integrated into government and critical infrastructure operations, organizations must balance innovation with a risk-based approach to security, transparency, resilience, and accountability. Through its growing body of AI security resources, research, and best practices, CIS is providing practical guidance on secure AI adoption, governance, and emerging threats, helping organizations build confidence in the responsible use of AI. Additional resources on security artificial intelligence are available at cisecurity.org/topics/securing-artificial-intelligence. For additional information or media inquiries, please contact CIS Senior Media Relations Manager, Kelly Wyland, at [email protected]. About CIS: The Center for Internet Security, Inc. (CIS(R) makes the connected world a safer place for people, businesses, and governments through its core competencies of collaboration and innovation. Today in New York is a community-driven nonprofit, responsible for the CIS Critical Security Controls(R) and CIS Benchmarks(TM), globally recognized best practices for securing IT systems and data. Today in New York lead a global community of IT professionals to continuously evolve these standards and provide products and services to proactively safeguard against emerging threats. Its CIS Hardened Images(R) provide secure, on-demand, scalable computing environments in the cloud. CIS is home to the Multi-State Information Sharing and Analysis Center(R)(MS-ISAC(R), the trusted resource for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial government entities. To learn more, visit cisecurity.org or follow Today in New York on X: @CISecurity. About MS-ISAC: The Multi-State Information Sharing and Analysis Center(R)(MS-ISAC(R) is the trusted nationwide network for cyber threat prevention, protection, response, and recovery for U.S. State, Local, Tribal, and Territorial (SLTT) governments. The mission of the MS-ISAC is to improve the overall cybersecurity posture of the nation's SLTT governments through coordination, collaboration, cooperation, and increased communication. The MS-ISAC is a division of the Center for Internet Security(R)(CIS(R), a 501(c)(3) nonprofit. Visit MS-ISAC or email [email protected] for more information. Kelly Wyland Center for Internet Security +1 518-256-6978 email Today in New York here Visit Today in New York on social media: LinkedIn Instagram Facebook YouTube X Legal Disclaimer: EIN Presswire provides this news content "as is" without warranty of any kind. Today in New York do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.

Center for Internet Security
Jul 28th, 2026
CIS named among Top Workplaces of the Capital Region.

CIS named among Top Workplaces of the Capital Region. July 28, 2026. The Center for Internet Security has once again been named one of the Capital Region's Top Workplaces by the Albany Times Union. CIS received a special award for Work/Life Flexibility, with one employee reporting "I have the flexibility I need to balance my work and personal life."

Washoe County
May 12th, 2026
Top headlines from the Board of County Commissioners meeting.

Top headlines from the Board of County Commissioners meeting. The following are highlights from today's Washoe County Board of County Commissioners meeting: 1. Registrar of Voters presents "Project Plain Sight": Washoe County has launched an election security pilot project with the Center for Internet Security (CIS), a national nonprofit organization dedicated to data integrity. Registrar of Voters Andrew McDonald presented "Project Plain Sight," a public-facing data transparency tool providing the public an opportunity to independently verify the integrity of the voter registration system. "Mr. McDonald and his team are laying the groundwork for greater confidence in the future of Washoe County elections, but I truly believe that when this pilot has been proven, and when it's been extended beyond just this pilot phase and applied to the entire election system, this project will echo all over Nevada and across the entire nation," Chair Clara Andriola said. "I believe we've started something here that will have a huge impact." CIS was launched by a former National Security Administration (NSA) data expert to implement best practices in data integrity across numerous industries. CIS worked with Washoe County to build a pilot project specifically to validate voter registration data, not ballots, through a system of controls that can be viewed by the public. "I truly believe that Washoe County is about to change the course of history. Election security challenges have never been solved because every attempt to solve them has failed because they lack something critical: proof of performance for election systems as a whole and a focus on process and people and not products," Andriola said. "Mr. McDonald's project is putting our eye on process-oriented monitoring and reporting." The cost of the project is staff time only, and the dashboard will be available on the Washoe County website here. "We push the boundaries now in Washoe County and in the Registrar of Voters Office. Innovation is part of our mission statement. When I came here, I wanted to push the boundaries of making sure that we can give the public what they needed: the confidence in the election process - integrity," McDonald said. "With this tool, they can go out and do the work themselves to verify it." 2. Board approves contract for operation of Safe Camp and Resource Center: The Board approved a contract to run Safe Camp and the Resource Center at the Nevada Cares Campus to the Reno Initiative for Shelter and Equality (RISE). RISE will provide staffing, program management, and administrative oversight for a two-year term through June 30, 2028, with an option of three one-year extensions. RISE was selected as the most responsive and responsible respondent to a Request for Proposals, and the contract will include the final two weeks of June 2026 at a cost of $38,750, and annual compensation of just over $2 million for each year of the contract beginning July 1. 3. Board acknowledges Code Enforcement complaints on abandoned properties: Washoe County staff, at the direction of the Board of County Commissioners, have been tackling the issue of abandoned privately owned parcels - largely concentrated in Sun Valley - that have no discernible owner responsible for cleanup efforts. Code Enforcement brought forward complaints against 11 such parcels for the Board's acknowledgement and to set a date for a public hearing to designate those parcels as public nuisances. Code Enforcement has documented conditions on these parcels including, but not limited to, the accumulation of debris, rubbish, refuse, abandoned or junk vehicles, and property maintained in a state of disrepair or deterioration that could cause harm to persons or damage to property. "These are very complex issues with owners who are deceased," Commissioner Mariluz Garcia said. "I think the assumption is that the County doesn't care or that we're turning our back, but that's not the case because if you look at any of these parcels, they've had multiple complaints, multiple warnings issued. In many cases, a lot of intervention has taken place already with removing vehicles and cleanups, but you just can't tell. Often, these are so bad that those efforts go unnoticed, so I just wanted to publicly acknowledge all the hard work that goes into addressing these, and we're off to a great start." 4. Board adopts zoning change to allow residential in commercial zones: The Board voted unanimously to approve a new code that will allow multifamily residential use in commercial zones and will prescribe requirements and standards for these uses. The addition of Article 403 complies with a new law passed during the 2025 Legislative Session (AB241) that mandates that Washoe County permit the development of multi-family uses in commercial zoning districts. The new code also accommodates Washoe County's strategic priority to increase the supply and affordability of housing. 5. Board approves donations to county departments and programs: The Board approved the following donations: * $18,500 from the Community Foundation of Northern Nevada on behalf of the Paul and Gwen Leonard Charitable Foundation as a legacy bequest for support of Rancho San Rafael Regional Park. * Cash donations from numerous donors totaling just over $25,500; animal food and treats valued at approximately $22,500 from SPCA; and various food and goods valued at approximately $6,800 from various donors to Washoe County Regional Animal Services. 6. Board presents proclamations recognizing special causes: Commissioners read three proclamations recognizing special groups and causes in Washoe County. * May 10-16 was designated Police Week to honor the dedication and sacrifices of law enforcement professionals. * May was proclaimed Treatment Court Month, and Judge Kendra Bertschy was present to receive the proclamation and recognize the more than 1,500 individuals served by treatment courts in Washoe County each year. * May was also proclaimed Educator Appreciation Month to honor the educators in our schools and educational institutions.