VP, Cyber and Information Security
Job Description:
Job
Summary:
We are seeking a highly skilled and experienced Vice President of Cyber & Information Security to lead the development, implementation, and management of our information security programs and policies.
This role will work closely with cross functional teams on day to day operations and broader compliance reporting and oversight.
As a service provider, we handle sensitive data for our clients, and it is our top priority to ensure that our systems and processes are secure and compliant with regulatory requirements.
The successful candidate will be responsible for leading our team of information security professionals to maintain a robust security posture, identify and mitigate risks, and ensure the confidentiality, integrity, and availability of our systems and data.
Key Responsibilities and Essential Job Functions Develop and implement comprehensive information security policies, procedures, and standards to protect our systems, data, and networks from cyber risk and threats Maintain cyber-security risk profiles, data, inventory, and controls appropriate to industry security standards such as NIST-800 and ISO27001.
Manage a team of information security professionals, providing guidance, mentoring, and support to ensure the team's success Consult with the product, operations, and support team to identify gaps, risks, and necessary capabilities Work with business and technology leaders to identify and prioritize information security risks and develop appropriate mitigation strategies; work with teams to help educate security design requirements (secure by design).
Establish and maintain relationships with external security partners and vendors to ensure alignment and consistency with industry best practices Ensure compliance with regulatory requirements are met via security policy, protocols and implementation, including GDPR, CCPA, PCI DSS, HIPAA, HITRUST, FISMA, and others as applicable Lead incident response planning and execution to minimize the impact of security incidents Lead team maintaining core security management platforms; inc.
vulnerability scanning, databases, risk analysis, SIEM, etc.
as appropriate and integrated with other corporate security platforms and operations.
Develop and implement an information security awareness program to educate employees, vendors and clients on security best practices and policies Conduct regular risk assessments and vulnerability testing to identify potential threats and vulnerabilities in our systems and processes; maintain security compliance scorecard / dashboard; master device list or inventory process (CMBD) Collaborate with the broader product, operations, and technology team to integrate security controls and mechanisms into our technology solutions Be an active member of our architecture review process Assist in supporting compliance audits and reporting, collaborating with the broader Governance, Risk and Compliance and Legal team Build and maintain corporate roles and responsibilities to drive accountability for security throughout, maintaining a security mindset regardless of function.
Develop board and audit reporting as necessary to support the business and leadership team.
Required
Qualifications:
Bachelor's or Master's degree in Computer Science, Information Security, or a related field 10
years of experience in information security, with at least 5 years in a leadership role CISSP Certified Demonstrated success in developing and implementing information security policies, procedures, and standards Experience managing a team of information security professionals and providing guidance and support to ensure the team's success, both direct line and dotted line staff Strong knowledge of security technologies and solutions, including network and function segmentation, firewalls, intrusion detection and prevention, vulnerability scanning, authentication (zero-trust) and penetration testing Familiarity with regulatory and compliance requirements, including GDPR, CCPA, PCI DSS, HIPAA, ISO, NIST, FISMA, and others as applicable; experience mapping various control frameworks to create a best of breed security model Experience in a service provider senior security leadership role Excellent communication and interpersonal skills, with the ability to work collaboratively with cross-functional teams and communicate complex technical concepts to non-technical stakeholders.
Prior experience in presenting to senior leadership including board of directors Willingness to travel as required (up to 30%)by Jobble Recommended Skills Architecture Auditing Certified Information Systems Security Professional Coaching And Mentoring Communication Confidentiality Estimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
