Currently partnered with an exciting financial services company who is looking to bring on a Director of Information Security to their team!
As the Director of Information Security you'd be responsible for providing strategic vision and leadership across teams that support enterprise security initiatives. Also, you will be responsible for developing and maintaining an enterprise wide information security program to assure assets are protected.
Responsibilities Include:
- Responsible for the planning and development of an enterprise information security strategy and best practices in support of the enterprise information security architecture.
- Ensure adequate security solutions are in place throughout all IT systems and platforms to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements.
- Monitor significant systems development and implementations to ensure delivery of IT security standards, implementation of best practices, adherence to security architecture, and the overall security of enterprise data.
- Create security policies and procedures and ensure that systems are documented and kept current.
- Consult and assist senior IT and business leaders with their information security risks and the responsibility for minimizing those risks.
- Experience implementing Information Security best practices, regulatory and compliance requirements; HIPAA, PCI, FISMA and SOX related standards
- Implement risk management frameworks; NIST CSF, CRISC, RIMS or similar.
- Develop & Implement processes and methods for auditing and addressing non-compliance to information security standards; facilitate migration of non-compliant environments to compliant environments..
- Research, design, and advocate new technologies, architectures and security products that will support security requirements for the enterprise and its customers, business partners, and vendors.
- Create business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program.
- Develop and implement a company-wide Information Security training program to assure the organization's workforce is knowledgeable of Information Security policies, practices, and relevant guidance appropriate to their role in the organization.
Qualifications Include:
- Bachelor's degree in Computer Science, Information Systems (or related degree), or equivalent experience.
- 7+ years experience in information technology.
- 7+ years experience in information security.
- 7+ years of people leadership experience.
- Strong technical knowledge required, including security operations, engineering and cyber security, endpoint protection, governance, risk and compliance, and identity management.
- Strong understanding of systems including but not limited to Windows, Unix, Linux and Virtualization technologies. Knowledge of iSeries and Cloud service technologies a plus.
- Ability to function in a fast-changing environment and to respond rationally to changing requirements in a deadline-driven situation.
- Strong planning and organizing skills.
- Excellent communication skills.
If this sounds like a fit for you, please apply now!