North America Field CISO

About Mimecast

Mimecast is a global cybersecurity leader redefining how organisations secure human risk. Our AI-powered, API-enabled Human Risk Management platform is purpose-built to protect organisations from the full spectrum of cyber threats - integrating cutting-edge technology with human-centric pathways to deliver visibility, strategic insight, and decisive action. More than 42,000 businesses worldwide trust Mimecast to keep ahead of an ever-evolving threat landscape.

We are one of only three vendors globally to achieve Leader status in both the Gartner® Magic Quadrant™ for Email Security and DCGAS. Our platform spans email security, insider risk management (Incydr), human risk awareness and training (Mimecast Engage), and the Human Risk Command Center - a single pane of glass that scores, surfaces, and enables action on human risk across an entire organisation. Most recently, we expanded Incydr into runtime data security, providing unified visibility across both human and AI agent risk.

Across North America, Mimecast has established offices in Lexington (Massachusetts), Minneapolis, Columbus, Chicago, San Francisco, and Mississauga (Ontario) - meaning the Field CISO is not parachuting into a region from afar, but stepping into a geography where Mimecast already has genuine presence, colleagues, and customer relationships. Through our Resilience Together corporate social responsibility programme, we also invest time, resources, and funds in underserved communities across the regions in which we operate - a signal of long-term commitment that matters in markets where vendor credibility is built over years, not quarters.

About the role:

We are looking for a Director-level Field CISO to join our Security function, reporting directly to the Global Field CISO. Based in Lexington, Massachusetts or Minneapolis, Minnesota with two days per week in the office, you will serve as the primary trusted security advisor across our most strategic accounts in North America - a region spanning the United States and Canada.

This is not a pre-sales or support role. You will operate at the intersection of customer success, executive advisory, and industry thought leadership, extending the Global Field CISO’s strategy into a region too diverse and commercially significant to be served from a central function. You bring your own credibility, your own relationships, and your own point of view - and you use them to make customers genuinely more secure.

In practice, that means helping CISOs across the region navigate the human risk challenge that defines Mimecast’s market: the recognition that most breaches trace back to human behaviour - negligent, compromised, or malicious - and that solving for it requires visibility across email, collaboration tools, endpoints, SaaS applications, and now AI agents. With more than 42,000 customers globally already trusting Mimecast with this problem, the Field CISO is not selling an unproven idea — they are bringing a proven platform and a community of practitioners into a region hungry for exactly this kind of advisory. You are the person who connects that story to local pain, in local language, at the executive level. Delivering a Remarkable Experience for our customers is not a tagline here - it is the standard.

What You’ll Do:

Customer advisory & success

• Act as a trusted advisor to CISOs, CTOs, and board-level stakeholders at our top strategic accounts across the Americas — helping them build and mature their human risk management programmes
• Guide customers through insider risk strategy, Incydr deployment, AI agent risk, and enterprise risk frameworks - translating the Mimecast platform’s capabilities into measurable business outcomes
• Support customers through audits, regulatory examinations, and compliance programmes across a fragmented regional landscape (SOC 2, HIPAA, GLBA, NYDFS, PIPEDA, and more)
• Be the first call when a customer has a security problem - whether or not it directly relates to our products. Run toward the problem, not away from it

Thought leadership & industry presence

• Represent Mimecast at major North American security conferences - RSA Conference, Black Hat USA, Gartner Security & Risk Management Summit, and sector-specific FSI and government events - advancing the human risk narrative in markets we must win
• Author whitepapers, research reports, and opinion pieces on human risk, insider threat, AI security, and the evolving threat landscape - contributing to Mimecast’s State of Human Risk research programme
• Build and sustain a credible public profile across North America that extends the Global Field CISO’s reach and reinforces Mimecast’s position as the human risk authority in the region

Commercial & revenue impact

• Partner with sales on security-sensitive enterprise deals - shortening sales cycles and lifting win rates through advisory credibility, particularly in regulated sectors (FSI, telco, government, critical infrastructure)
• Support land-and-expand motions by deepening relationships within existing accounts and surfacing opportunities to expand Mimecast platform adoption
• Log all advisory-linked opportunities in CRM to build the evidence base for Field CISO ROI - and to demonstrate how security advisory translates to customer outcomes

Voice of the customer

• Feed structured customer insights back to product and engineering - surfacing gaps in human risk capabilities, Incydr controls, AI governance features, and secure-by-default configurations
• Advocate for reductions in customer audit and compliance toil by pushing for product changes that make evidencing conformance easier - this is Make Things Better in action
• Contribute to the Mimecast CISO Customer Advisory Board (CAB) and regional CISO community events, building a customer community that values Mimecast as a long-term security partner

What You’ll Bring:

Experience & background

• Depth of experience in enterprise information security, with 10+ years in a leadership role - including at least 3 years as a CISO, VP of Security, or equivalent inside an enterprise. Lived operational experience is non-negotiable.
• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field (Master’s preferred) - or equivalent demonstrated experience at senior security leadership level
• Advanced certifications: CISSP, CRISC, CISM, GCEIT, or GIAC equivalent
• Proven ability to engage and influence C-suite and board audiences with credibility and humility
• Prior exposure to both U.S. and Canadian markets, with cross-cultural fluency across North American business environments
• Comfortable operating as a Director-level individual contributor - highly self-directed, without requiring day-to-day management oversight

Join our Security team to accelerate your career journey, contributing to projects that have real impact. You will be immersed in a dynamic environment that recognizes and celebrates your achievements.

Mimecast is on a path of steady and healthy growth as a company, investing in people like you who bring the skills and expertise to raise our technical expertise, operational maturity, and customer success to the next level. Your contributions are important!  Every voice and action matters.

Mimecast offers formal and on-the-job learning opportunities, maintains a comprehensive benefits package that helps our employees and their family members to sustain a healthy lifestyle, and importantly – opportunities to work with cross-functional teams to build your knowledge!

Our Hybrid Model: We provide you with the flexibility to live balanced, healthy lives through our hybrid working model that champions both collaborative teamwork and individual flexibility. Employees are expected to come to the office at least two days per week, because working together in person:

• Fosters a culture of collaboration, communication, performance, and learning.
• Drives innovation and creativity within and between teams
• Introduces employees to priorities outside of their immediate realm.
• Ensures important interpersonal relationships and connections with one another and our community!

The base salary range for this position is $196,000−$294,000 plus benefits. This range represents the minimum and maximum new hire compensation for this role. The position may also be eligible for incentive plans and additional benefits, in accordance with company policy and local regulations. Our salary ranges are determined by role, level, and location with individual compensation also dependent on factors such as qualifications, experience, and skills. Final offers will reflect these considerations and may vary accordingly.

#LI-CS1

Belonging at Mimecast

Cybersecurity is a community effort. That’s why we’re committed to building an inclusive, diverse community that celebrates and welcomes everyone – unless they’re a cybercriminal, of course.

We’re proud to be an Equal Opportunity and Affirmative Action Employer, and we’d encourage you to join us whatever your background. We particularly welcome applicants from traditionally underrepresented groups.

We consider everyone equally: your race, age, religion, sexual orientation, gender identity, ability, marital status, nationality, or any other protected characteristic won’t affect your application.

If you require any adjustments or accommodations due to a disability, or any other reason that may help you in your interview process, please let us know by emailing [email protected].

Due to certain obligations to our customers, an offer of employment will be subject to your successful completion of applicable background checks, conducted in accordance with local law.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment.